plugins/enforce/skills/ci-integration-automated-policy-enforcement/SKILL.md
Block non-compliant manifests at merge time using policy-platform container in CI. Automate Kyverno validation across environments with zero configuration drift.
npx skillsauth add adaptive-enforcement-lab/claude-skills ci-integration-automated-policy-enforcementInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
CI integration enforces policies automatically in every pull request using the same policy-platform container developers run locally.
graph LR
PR[Pull Request] --> ENV[Detect Environment]
ENV --> LINT[Lint Values]
LINT --> BUILD[Build Manifests]
BUILD --> VAL[Validate Policies]
VAL --> MERGE{All Pass?}
MERGE -->|Yes| ALLOW[Allow Merge]
MERGE -->|No| BLOCK[Block Merge]
%% Ghostty Hardcore Theme
style ALLOW fill:#a7e22e,color:#1b1d1e
style BLOCK fill:#f92572,color:#1b1d1e
Key Principle: CI uses identical validation to local development. No surprises.
See the full implementation guide in the source documentation.
See examples.md for code examples.
See reference.md for complete documentation.
development
Compile MkDocs documentation into Claude Code skills so patterns reach engineers inside the agent instead of waiting to be searched for.
documentation
Workload Identity Federation implementation guide. GKE setup, IAM bindings, ServiceAccount configuration, migration from service account keys, and troubleshooting patterns.
development
Secure GitHub Actions trigger patterns for pull requests, forks, and reusable workflows. Preventing privilege escalation and code injection through trigger misconfiguration.
development
Structured framework for evaluating GitHub Actions security before adoption. Trust tiers, risk assessment checklist, and decision tree for action evaluation.