policy-as-code
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The file provides informational templates for open-source policy frameworks (OPA, Kyverno, Checkov) along with mock definitions and deployment steps.
- [COMMAND_EXECUTION]: Code snippets include typical configuration checking utility commands such as
terraform show,opa eval,conftest test, and standard GitHub Action steps (hashicorp/setup-terraform,bridgecrewio/checkov-action). These commands operate safely within normal automated testing boundaries. - [EXTERNAL_DOWNLOADS]: Includes a reference to downloading the Kyverno CLI (
kyverno-cli_linux_amd64.tar.gz) from GitHub viacurl. Under [TRUST-SCOPE-RULE], this well-known repository reference is safe and documented neutrally.
Audit Metadata