Enhance your Compliance with Policy-Based CI/CD
summary
Shows how to enforce compliance inside GitLab CI by running Open Policy Agent with Rego policies in an analyze stage that fails the pipeline when checks fail. Demos include a Terraform flow that converts terraform plan to terraform plan JSON and blocks resource creation when location != west europe, and a project-inventory check that requires SAST, dependency scanning, secret detection and SSL grade ≥ A. Policies emit JSON artifacts used to create alerts and issues.
AI-written summary · about
chapters (8)
- 0:00Introduction to compliance
- 1:45Defining compliance concepts
- 5:30Compliance in CI/CD
- 7:15Open policy agent overview
- 11:37How OPA works
- 16:48Getting started with OPA
- 17:52Infrastructure as code demo
- 24:46Project validation demo
related talks
30mGitops with Policy As Code and OPA
25mOpen Policy Agent as a Control Engine
18mDevOps All the Things: Creating a Pipeline to Validate Your OPA Policies
39mApplying Policy Throughout The Application Lifecycle with Open Policy Agent
45mCatching Commits to Secure Infrastructure as Code
37mDeep-dive into Open Policy Agent + Conftest + GateKeeper
26mOperational Compliance: From Requirements to Reality
18mImplementing Unit Tests for Terraform with Open Policy Agent