PoliciesDocumentation and resources relating to policies in Sigstore Policy Controller.Enforce SBOM attestation with Policy ControllerDisallowing Non-Default CapabilitiesDisallowing Privileged PodsDisallowing Run as Root UserMaximum Container Image AgeDisallowing Unsafe sysctlsVerify Signed Chainguard ImagesLimit High or Critical CVEs in your Images WorkloadsRego PoliciesExample Policies