Agent skill
local-development-with-policy-as-code
Run Kyverno policy validation locally with policy-platform containers. Zero local setup, same tools as CI, instant feedback before committing code changes.
Install this agent skill to your Project
npx add-skill https://github.com/adaptive-enforcement-lab/claude-skills/tree/main/plugins/enforce/skills/local-development-with-policy-as-code
SKILL.md
Local Development with Policy-as-Code
When to Use This Skill
The policy-platform container includes all tools needed for local policy validation:
- Kyverno CLI - Policy validation and testing
- Pluto - Deprecated API detection
- Helm - Chart rendering and linting
- Spectral - OpenAPI/values schema validation
- yq - YAML processing
Zero Local Setup Required
One container contains all policies and tools. No local installations. Pull the container, run validations. Same environment as CI.
Implementation
See the full implementation guide in the source documentation.
Examples
See examples.md for code examples.
References
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
github-token-permissions-overview
Understanding GITHUB_TOKEN scope, default permissions, and implementing least-privilege principle for GitHub Actions workflows.
secure
Find and fix security issues before they become incidents. Vulnerability scanning, SBOM generation, supply chain security, and secure authentication workflows.
complete-workflow-examples
Copy-paste hardened CI/CD workflows with SHA-pinned actions, minimal GITHUB_TOKEN permissions, OIDC authentication, and comprehensive security scanning for GitHub Actions.
ephemeral-runner-patterns
Disposable runner patterns for GitHub Actions. Container-based, VM-based, and ARC deployment strategies with complete state isolation between jobs.
action-pinning-overview
Why pinning GitHub Actions to SHA-256 commits matters for supply chain security. Attack vectors from unpinned actions and comparison of tag vs SHA pinning.
github-actions-security-patterns-hub
Complete security patterns for GitHub Actions covering action pinning, GITHUB_TOKEN permissions, third-party action risks, secret management, and runner security.
Didn't find tool you were looking for?