概要
This skill provides a suite of Open Policy Agent (OPA) templates designed to harden Kubernetes environments against supply chain attacks and unauthorized deployments. It enables developers to automatically enforce critical security standards, such as restricting image pulls to trusted private registries, requiring immutable image digests to prevent tag mutation, and validating build provenance through KMS-backed signatures. By integrating these enforcement patterns into the development workflow, teams can ensure that only verified, vulnerability-free containers are permitted to run in production clusters.