Policy Category

[sbtaylor15]

Handle policy management tools that fit into the pipeline.

[MarckK]

Hi @sbtaylor15,

@idanshahar has suggested adding a Governance sub-category on 257:

It would be great to have your input and that of @justinabrahms, @bradmccoydev, and others thinking about policy + pipelines.

[justinabrahms]

Policy is a very large space. There's nothing pipeline specific about most of the tools that I know (though I've just learned about Allero). I'll cross post it to the supply chain sig.

[idanshahar]

Hey @justinabrahms, here are several pipeline-specific policy tools. However, most of them focus on security practices and are not open source. OX Security Argon Security Spectral Ops Apolicy

I believe we will see more policy solutions for pipelines getting out there, many companies already developed internal tooling to enforce CI/CD best practices and to support shifting left DevOps.

[MarckK]

We now have a subcategory for Policy under the main DevSecOps category on the landscape. Please do iterate on this Policy category, with any changes you think are due, including new additions to that category. Thank you!

[fdegir]

Kyverno and OPA are now included on the landscape, under policy category as well so closing this issue.

Please either directly add new projects to the category via PRs or open a new issue for changes to existing category and projects.