Policy catalog¶

The kyverno-json policy catalog contains curated policies to be reused.

You can share your policies with the community by opening a pull request here.

Policies indexed by tags¶

aws¶

• ECS cluster enable logging
• ECS requires container insights
• ECS public IP
• ECS require latest platform fargate
• ECS require filesystem read only

aws/ecs¶

• ECS cluster enable logging
• ECS requires container insights
• ECS public IP
• ECS require latest platform fargate
• ECS require filesystem read only

dockerfile¶

• Dockerfile expose port 22 not allowed
• Dockerfile latest image tag not allowed
• Ensure apt is not used in Dockerfile
• Dockerfile last user is not allowed to be root
• Ensure sudo is not used in Dockerfile