Definitions
Supply Chain Policy e um termo de GitOps para rules that decide which code, images, dependencies, and sources can be released. Ajuda equipes, pessoas e agentes a comparar o estado declarado com sistemas em execucao e agir sem fingir que o deploy fez mais do que as evidencias mostram. Fonte: OpenGitOps principles.
“A equipe usou Supply Chain Policy antes do almoco, e o release parou de correr para producao com o cadarco solto.”
Supply Chain Policy is a GitOps term for rules that decide which code, images, dependencies, and sources can be released. It helps teams, humans, and agents compare declared source state with running systems, then act without pretending a deployment did more than the evidence shows. Source context: OpenGitOps principles.
“The team used Supply Chain Policy before lunch, so the release did not sprint into production wearing untied shoes.”
Related Terms
- Admission PolicyGitOps and Release Engineering
Admission Policy e um termo de GitOps para a rule that evaluates resources before they are accepted by the cluster. Ajuda equipes, pessoas e agentes a comparar o estado declarado c...
- Kyverno PolicyGitOps and Release Engineering
Kyverno Policy e um termo de GitOps para a Kubernetes-native policy rule for validating, mutating, or generating resources. Ajuda equipes, pessoas e agentes a comparar o estado dec...
- OPA GatekeeperGitOps and Release Engineering
OPA Gatekeeper e um termo de GitOps para a Kubernetes policy system often used to enforce admission constraints. Ajuda equipes, pessoas e agentes a comparar o estado declarado com ...
- Policy as CodeGitOps and Release Engineering
Policy as Code e um termo de GitOps para security, compliance, or release rules written as versioned machine-readable code. Ajuda equipes, pessoas e agentes a comparar o estado dec...
- SBOM GateGitOps and Release Engineering
SBOM Gate e um termo de GitOps para a release check that requires software bill of materials evidence before promotion. Ajuda equipes, pessoas e agentes a comparar o estado declara...
- Signed ImageGitOps and Release Engineering
Signed Image e um termo de GitOps para a container image with cryptographic proof attached to the artifact. Ajuda equipes, pessoas e agentes a comparar o estado declarado com siste...