# Rego policies library

This repository contains a collection of Rego policies that can be used with
Kubewarden to enforce security and compliance best practices.

These policies have been adapted from https://github.com/weaveworks/policy-library.

Weaveworks has been a pioneer in the field of Kubernetes security and
compliance. They transitioned to a community-driven project with the closure of
their start-up company at the beginning of 2024, which was a sad moment in the
cloud native sphere. We thank Weaveworks and their contributors for their work
on these policies, and we believe they are a good asset for Kubernetes users.

The policies are organized as:
- `policies/`: Production ready, tested policies, released via tags to
  `ghcr.io/kubewarden/policies` and artifacthub.io.
- `staging/`: Policies under evaluation, not yet released.

## Releasing a policy

Push a new tag with the pattern `PolicyName/vX.Y.Z`, with the policy in the
folder `policies/PolicyName`. The release job will test, build and push the
policy to `ghcr.io/kubewarden/policies`, create the corresponding GH release,
as well as updating the `artifacthub` branch in this repository.