# security policies Published articles for security policies. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## Compliance documents are now available in Team settings DevFeed: [Compliance documents are now available in Team settings]() Original publisher: [Read original article]() Author: Will Sather Published: 2026-08-19T00:00:00Z Content type: release Language: en Sources: [Vercel News]() Topics: [Security](), [Vercel](), [SOC]() Tags: [compliance](), [documentation](), [enterprise](), [security](), [security-policies](), [soc-2](), [trust-center](), [vercel]() ### AI overview Vercel added a Compliance section to Team settings, allowing users to preview and download compliance documents such as SOC 2 Type 2 attestations and security policies. Downloads and previews are watermarked, and the feature is available on Pro and Enterprise plans. ### Source excerpt A new Compliance section in Team settings lets you preview and download Vercel's compliance documents directly in the dashboard. These include attestations like SOC 2 Type 2, security policies, and other security documents that are available through the Trust Center. You can select a single document, an entire attestation, or multiple documents, and download them together as a single zip archive. Every download and preview is watermarked with your user and team information. Some entries link out to external resources instead, such as an auditor's public certificate directory. The Trust Center remains available for additional security information. Vercel's compliance documents are available on Pro and Enterprise plans. Learn more in the compliance documentation. Read more ## Why repository-centric security still needs an artifact access control plane DevFeed: [Why repository-centric security still needs an artifact access control plane]() Original publisher: [Read original article]() Author: Adrian Herrera Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [supply-chain-security](), [CI/CD](), [Security](), [Authorization](), [iac-security]() Tags: [access-control](), [ci-cd](), [infrastructure-as-code](), [security](), [security-policies](), [software-supply-chain](), [vulnerability](), [vulnerability-scanning]() ### AI overview The article explains that repository-centric security controls can leave gaps because dependency access is distributed across CI runners, ephemeral build agents, public registries, developer tooling, and automation. It argues for an artifact access control plane, including Virtual Registries, to enforce security policies inline across CI/CD execution paths, complementing repository-based vulnerability scanning, license analysis, dependency governance, and remediation. ### Source excerpt Repository security gaps: Distributed dependency access bypasses centralized analysis. Virtual Registries offer the critical inline control plane to enforce artifact security policies across your CI/CD pipeline. ## Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL DevFeed: [Scaling Kubernetes governance: A platform engineer's guide to Kyverno and CEL]() Original publisher: [Read original article]() Author: Koray Oksay Published: 2026-07-23T05:40:01Z Content type: article Language: en Sources: [Platform Engineering Blog]() Topics: [Kubernetes](), [Platform Engineering](), [Security](), [developer velocity](), [Containers](), [supply-chain-security](), [YAML](), [opa](), [rego]() Tags: [common-expression-language](), [compliance](), [container-images](), [containers](), [cosign](), [deployment](), [developer-velocity](), [governance](), [hipaa](), [integration](), [kubernetes](), [kyverno](), [pci-dss](), [platform](), [policy](), [security](), [security-policies](), [sigstore](), [soc-2](), [supply-chain-security]() ### AI overview A guide to using Kyverno and its Common Expression Language support for Kubernetes governance. It explains how platform engineering teams can enforce policies, automate resource changes, generate resources, verify image signatures, and maintain security and compliance while preserving developer velocity. ### Source excerpt Kyverno with CEL support provides Policy-as-Code for Kubernetes governance. Enforce security, automate guardrails, and boost developer velocity for platform engineering teams. ## Kube-Policies: Guardrails for Apps Running in Kubernetes DevFeed: [Kube-Policies: Guardrails for Apps Running in Kubernetes]() Original publisher: [Read original article]() Author: Hardik Darji Published: 2025-01-28T08:00:00Z Content type: article Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [Kubernetes](), [cloud security](), [Open Policy Agent](), [Testing](), [SIEM, Security, Observability]() Tags: [admission-controller](), [engineering](), [kubernetes](), [observability](), [open-policy-agent](), [security](), [security-policies](), [testing]() ### AI overview This article introduces Square's design considerations for security guardrails in Kubernetes environments. It explains why default Kubernetes configurations can leave applications vulnerable and describes requirements for an abstraction layer built on Open Policy Agent, including policy dry-runs, minimal user disruption, testing, exception management, extensibility, and observability. ### Source excerpt Design considerations for highly sensitive environments. ## Enforce Flexible Governance in GraphOS using Custom Checks DevFeed: [Enforce Flexible Governance in GraphOS using Custom Checks]() Original publisher: [Read original article]() Author: Samuel Collard Published: 2024-11-26T12:00:00Z Content type: article Language: en Sources: [Apollo Blog]() Topics: [GraphOS](), [API Governance](), [API Platform]() Tags: [api-governance](), [api-platform](), [business-logic](), [continuous-integration](), [graphos](), [graphql](), [schema](), [security-policies]() ### AI overview Apollo GraphOS supports custom schema checks that let organizations add business logic, security policies, and company-specific rules to the existing schema check workflow. The article introduces the governance use case and begins describing how to configure a custom check through an HTTPS endpoint. ### Source excerpt Apollo GraphOS now supports custom schema checks, a new feature that addresses API platform teams' demand for enhanced schema governance capabilities. This functionality allows organizations to integrate their own business logic, security policies, and rules into Apollo's existing schema check workflow, ensuring that every schema change adheres to company-specific standards. ## Building an Uber Clone with Flutter and Supabase DevFeed: [Building an Uber Clone with Flutter and Supabase]() Original publisher: [Read original article]() Author: Tyler Shukert Published: 2024-09-05T07:00:00Z Content type: tutorial Language: en Sources: [Supabase Blog]() Topics: [Flutter](), [Supabase](), [real-time](), [data](), [Database]() Tags: [dart](), [data](), [database](), [flutter](), [google-maps](), [gps](), [guide](), [real-time](), [security-policies](), [tutorial]() ### AI overview This tutorial explains how to build the consumer-facing portion of an Uber-like ride application with Flutter and Supabase. It demonstrates real-time driver location tracking using geographical data, PostGIS, Supabase Realtime, database tables, row-level security policies, and database functions and triggers. Payments and the driver-facing application are outside the article's scope. ### Source excerpt Learn how to handle real-time geospatial data using Supabase Realtime and Flutter. ## Secure AI tool adoption: Perceptions and realities DevFeed: [Secure AI tool adoption: Perceptions and realities]() Original publisher: [Read original article]() Author: Alex Salkever Published: 2024-06-04T17:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [ai-coding](), [Application Security](), [Security](), [Generative AI](), [sdlc](), [datasets]() Tags: [acquisition](), [ai](), [ai-coding](), [ai-readiness](), [application-security](), [awareness](), [blog](), [developer](), [devops](), [devsecops](), [executive](), [external](), [generative-ai](), [interest](), [sdlc](), [security](), [security-policies](), [snyk](), [survey]() ### AI overview Snyk reports survey findings on enterprise adoption of generative AI coding tools. Although organizations generally felt prepared and considered the tools and generated code safe, many skipped proof-of-concept exercises and other basic security measures. Developers and AppSec professionals expressed more concern about AI-generated code than C-suite respondents. ### Source excerpt In our latest report, Snyk surveyed security and software development technologists, from top management to application developers, on how their companies had prepared for and adopted generative AI coding tools. ## The role of attestations in a secure software supply chain DevFeed: [The role of attestations in a secure software supply chain]() Original publisher: [Read original article]() Published: 2023-04-04T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [supply-chain-security](), [chainguard enforce](), [Docker Verified Publisher]() Tags: [attestation](), [chainguard](), [chainguard-enforce](), [digital-signatures](), [integrity](), [policy](), [secure-software](), [secure-software-supply-chain](), [security-policies](), [slsa](), [software-attestations](), [supply-chain]() ### AI overview This article explains how attestations support software supply-chain policy enforcement. It describes attestations as signed claims from identified speakers about code or build results, allowing deployment systems to verify policy requirements without repeating expensive or impractical checks. ### Source excerpt Chainguard Enforce enables policy enforcement using attestations. Learn how to use these principles to create and enforce secure supply chain policies. ## Are Kubernetes Validating Admission Policies the end of admission controllers? DevFeed: [Are Kubernetes Validating Admission Policies the end of admission controllers?]() Original publisher: [Read original article]() Published: 2023-03-31T00:00:00Z Content type: article Language: en Sources: [Chainguard: Unchained]() Topics: [Kubernetes](), [supply-chain-security](), [API](), [Structured-data]() Tags: [admission-controller](), [api](), [api-server](), [blog-post](), [chainguard-enforce](), [common-expression-language](), [complexity](), [deployment](), [fragmentation](), [integration](), [kubernetes](), [kubernetes-admission-controller](), [performance](), [policy](), [security-policies](), [software-supply-chain](), [supply-chain](), [validation]() ### AI overview The article explains how Kubernetes Validating Admission Policies, introduced in alpha in Kubernetes 1.26, let users evaluate many admission checks natively in the API server using Google's Common Expression Language (CEL). It argues that these policies improve performance, reliability, and integration by reducing reliance on webhooks, while noting that admission controllers remain necessary for policies beyond CEL's deliberately restricted capabilities. ### Source excerpt Validating Admission Policies are here in Kubernetes 1.26. Read on to learn how they work and what they mean for admission controllers. ## Sigstore policy-controller 101 DevFeed: [Sigstore policy-controller 101]() Original publisher: [Read original article]() Published: 2023-03-29T00:00:00Z Content type: tutorial Language: en Sources: [Chainguard: Unchained]() Topics: [sigstore policy controller](), [supply-chain-security](), [Kubernetes admission controller](), [Kubernetes]() Tags: [admission-controller](), [cicd](), [cloud-native](), [cluster-security](), [container-images](), [container-security](), [cosign](), [getting-started](), [how-to](), [kubernetes](), [kubernetes-admission-controller](), [kubernetes-clusters](), [security-policies](), [signing-containers](), [sigstore](), [sigstore-policy-controller](), [software-supply-chain-security]() ### AI overview This tutorial introduces Sigstore policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. It explains how to install the controller in a local kind cluster and configure declarative policies for trusted registries, signed images, and other container conditions. ### Source excerpt Chainguard breaks down the benefits of Sigstore's policy-controller, a Kubernetes admission controller that integrates with Cosign and the Sigstore standard. ## Enforcing Policies with Gatekeeper in Kubernetes DevFeed: [Enforcing Policies with Gatekeeper in Kubernetes]() Original publisher: [Read original article]() Author: Cameron Wood, Elieser Pereira, Rodrigo Martinez Published: 2022-06-30T13:34:38Z Content type: tutorial Language: en Sources: [Blog - Container Solutions]() Topics: [Kubernetes](), [Security](), [Open Policy Agent](), [Authorization]() Tags: [best-practices](), [how-to](), [kubernetes](), [open-policy-agent](), [open-source](), [policy](), [security](), [security-policies](), [wtf-is-cloud-native]() ### AI overview This tutorial explains how Gatekeeper works with Kubernetes RBAC to enforce authorization rules and pod security policies. It presents Gatekeeper, based on Open Policy Agent, as a way to add deny rules, protect namespaces, and replace deprecated Pod Security Policies. ### Source excerpt When managing Kubernetes clusters, cluster administrators need to ensure the overall stability of the system. To accomplish this it is necessary to avoid disruptions to the control plane, and also avoid any risks of users being able to escalate their privileges thus causing further problems. With this in mind, protecting the kube-system namespace and enforcing pod security policies to run payloads with just the necessary access is a must. ## Kubernetes - Pod Security Policies DevFeed: [Kubernetes - Pod Security Policies]() Original publisher: [Read original article]() Author: Jason Price Published: 2020-05-07T19:00:00Z Content type: tutorial Language: en Sources: [Square Corner Blog RSS Feed]() Topics: [Kubernetes](), [Security](), [Exception]() Tags: [engineering](), [exception](), [kubernetes](), [kubernetes-security](), [security](), [security-policies](), [troubleshooting]() ### AI overview A practical guide to deploying Kubernetes Pod Security Policies with restrictive defaults and managed exceptions. It explains how PSPs can reduce container escape risks, discusses their limitations, and covers implementation pitfalls and troubleshooting. ### Source excerpt A fully fleshed out example with exception management