Executes policy-as-code checks to ensure security compliance and governance throughout the development lifecycle.
The Policy Runner skill automates the evaluation of governance rules using industry-standard tools like OPA and Conftest. By interpreting structured policy plans, it executes specific security and compliance checks, captures raw execution logs, and generates comprehensive summaries of passes and failures. This skill is a core component of a governed SDLC within Claude Code, providing a deterministic audit trail and ensuring that every code change adheres to organizational standards without manual intervention.
주요 기능
01Non-destructive operation that maintains code integrity
02Comprehensive summary reporting of check results
030 GitHub stars
04Automated OPA and Conftest policy evaluation
05Dynamic execution based on policy_plan.md configurations
06Detailed logging of raw runner output for audit trails
사용 사례
01Enforcing organizational compliance rules during the development process
02Generating deterministic audit logs for regulated software environments
03Validating infrastructure-as-code templates against security benchmarks
