Enforce

Enforce

Overview

Making security mandatory through automation.

Branch Protection Enforcement Patterns

Comprehensive branch protection configuration patterns with…

Implementation Roadmap

Phased rollout plan for SDLC hardening.

• Phase 1: Foundation (Weeks 1-4) — Deploy pre-commit hooks for secrets detection…
• Phase 2: Automation (Weeks 5-8) — Automation phase SDLC hardening overview.
• Phase 3: Runtime (Weeks 9-12) — Runtime enforcement phase overview.
• Phase 4: Advanced (Month 4+) — Audit evidence collection and compliance validation.
• SDLC Hardening Implementation Roadmap — Deploy defense-in-depth SDLC hardening across four…

Incident Readiness

• Incident Response Playbook Templates — Incident response playbook templates for Kubernetes.

Policy-as-Code: End-to-End Enforcement

Enforce security and compliance policies across…

• CI Integration: Automated Policy Enforcement — Block non-compliant manifests at merge time…
• JMESPath for Kyverno — Master JMESPath for Kyverno policies.
• Kyverno Basics — Install Kyverno, create validation policies, and…
• Kyverno Generation Templates — Kyverno generation policy templates that auto-create…
• Kyverno Image Validation Templates — Kyverno image validation: registry allowlists, digests…
• Kyverno Mutation Templates — Kyverno mutation policies that auto-inject labels…
• Kyverno Network Security Templates — Kyverno network security policies that enforce…
• Kyverno Pod Security Templates — Kyverno pod security policies enforcing Pod…
• Kyverno Policy Templates — Kyverno policy templates overview.
• Kyverno Resource Governance Templates — Kyverno resource governance policies enforcing CPU/memory…
• Local Development with Policy-as-Code — Run Kyverno policy validation locally with…
• Multi-Source Policy Aggregation — Aggregate Kyverno policies from security, DevOps…
• OPA Image Security Templates — OPA image security policies for container…
• OPA Pod Security Templates — OPA pod security policies preventing privileged…
• OPA Policy Templates — OPA Gatekeeper policy templates overview.
• OPA RBAC Templates — OPA RBAC policies preventing cluster-admin privilege…
• OPA Resource Governance Templates — OPA resource governance policies enforcing CPU/memory…
• Policy Packaging — Build policy-platform containers that aggregate Kyverno…
• Policy-as-Code Operations — Manage Kyverno policy lifecycle from creation…
• Policy-as-Code Template Library — Production-ready policy template library: 48 battle-tested…
• Runtime Deployment: Admission Control with Kyverno — Deploy Kyverno admission control as final…

Required Status Checks

CI/CD pipelines as merge gates.

SLSA Implementation Playbook

Complete SLSA implementation playbook: clarify SLSA…

• SLSA Provenance: Toolchain Integration — SLSA provenance for Go, Node.

Full Reference

Full text: reference.md. Raw sources: library/. Live: docs.