Enforce
Overview
Making security mandatory through automation.
Branch Protection Enforcement Patterns
Comprehensive branch protection configuration patterns with…
Implementation Roadmap
Phased rollout plan for SDLC hardening.
- Phase 1: Foundation (Weeks 1-4) — Deploy pre-commit hooks for secrets detection…
- Phase 2: Automation (Weeks 5-8) — Automation phase SDLC hardening overview.
- Phase 3: Runtime (Weeks 9-12) — Runtime enforcement phase overview.
- Phase 4: Advanced (Month 4+) — Audit evidence collection and compliance validation.
- SDLC Hardening Implementation Roadmap — Deploy defense-in-depth SDLC hardening across four…
Incident Readiness
- Incident Response Playbook Templates — Incident response playbook templates for Kubernetes.
Policy-as-Code: End-to-End Enforcement
Enforce security and compliance policies across…
- CI Integration: Automated Policy Enforcement — Block non-compliant manifests at merge time…
- JMESPath for Kyverno — Master JMESPath for Kyverno policies.
- Kyverno Basics — Install Kyverno, create validation policies, and…
- Kyverno Generation Templates — Kyverno generation policy templates that auto-create…
- Kyverno Image Validation Templates — Kyverno image validation: registry allowlists, digests…
- Kyverno Mutation Templates — Kyverno mutation policies that auto-inject labels…
- Kyverno Network Security Templates — Kyverno network security policies that enforce…
- Kyverno Pod Security Templates — Kyverno pod security policies enforcing Pod…
- Kyverno Policy Templates — Kyverno policy templates overview.
- Kyverno Resource Governance Templates — Kyverno resource governance policies enforcing CPU/memory…
- Local Development with Policy-as-Code — Run Kyverno policy validation locally with…
- Multi-Source Policy Aggregation — Aggregate Kyverno policies from security, DevOps…
- OPA Image Security Templates — OPA image security policies for container…
- OPA Pod Security Templates — OPA pod security policies preventing privileged…
- OPA Policy Templates — OPA Gatekeeper policy templates overview.
- OPA RBAC Templates — OPA RBAC policies preventing cluster-admin privilege…
- OPA Resource Governance Templates — OPA resource governance policies enforcing CPU/memory…
- Policy Packaging — Build policy-platform containers that aggregate Kyverno…
- Policy-as-Code Operations — Manage Kyverno policy lifecycle from creation…
- Policy-as-Code Template Library — Production-ready policy template library: 48 battle-tested…
- Runtime Deployment: Admission Control with Kyverno — Deploy Kyverno admission control as final…
Required Status Checks
CI/CD pipelines as merge gates.
SLSA Implementation Playbook
Complete SLSA implementation playbook: clarify SLSA…
- SLSA Provenance: Toolchain Integration — SLSA provenance for Go, Node.
Full Reference
Full text: reference.md. Raw sources: library/. Live: docs.