WeAreDevelopers LIVE • Oct 19, 2022

Policy as [versioned] code - you're doing it wrong

Chris Nesbitt-Smith

Writing rules in YAML isn't true policy as code. Stop breaking CI pipelines and start treating compliance as a visible, version-controlled software dependency.

Policy as [versioned] code - you're doing it wrong thumbnail

Checking access…

Playback and chapters load privately for Free videos.

Matching moments

1:22 min

Enforcing policy validations in continuous integration pipelines

Philipp Krenn · World Congress 2023

7:07 min

Implementing programmatic policy checks with Open Policy Agent

Madhu Akula · LIVE

3:30 min

Managing security and compliance risks in automated code generation

Hari Lingamagunta

Hari Lingamagunta +3 · World Congress 2026 North America

2:31 min

Enforcing compliance with guardrails and policy as code

Martin Reynolds

Martin Reynolds · World Congress 2025

4:48 min

Automating customized policy enforcement with open source tools

Noaa Barki · World Congress 2022

2:57 min

Defining new rules for the next year of software delivery

Darko Mesaros

Darko Mesaros +4 · World Congress 2026 North America

More from WeAreDevelopers LIVE

Humans in the Loop: Storytelling in Tech thumbnail

Humans in the Loop: Storytelling in Tech

Christian Heilmann +2

4 days ago

WeAreDevelopers LIVE: Your Brain Is Lying to You: Cognitive Biases in Development thumbnail

Your Brain Is Lying to You: Cognitive Biases in Development

Last week

Like Peas in a Pod - What Happens When People Clone Your App? thumbnail

Like Peas in a Pod - What Happens When People Clone Your App?

Ivan Kutskir +2

2 weeks ago

WeAreDevelopers LIVE - Read more, Prompt Less thumbnail

Read more, Prompt Less

Christian Heilmann +2

3 weeks ago

WeAreDevelopers LIVE - Tech Education in Two Languages thumbnail

Tech Education in Two Languages

Daniel Cranney +1

Oct 2026

WeAreDevelopers LIVE - Playing in Production thumbnail

Playing in Production

Andrew MacLean +2

Sep 2026

Upcoming sessions on this topic

Beware of Strangers Bearing Code: Open Source Trust in the Agent Era

Vikram Vaswani

Consultant

From Monolith to Phases: Restructuring Terraform Deployments That Work in Any Cloud

Naveen Kumar Kalapala

Infosys Ltd

Lead Cloud Engineer

Ship Happens: Guardrails for AI-Written Code

Anthony Nguyen

LaunchDarkly

Senior Solutions Engineer

Cloud Sovereignty Is an Architecture Problem: Patterns for Modern Platform Teams

Josephine Eskaline Joyce

IBM India Pvt Ltd

STSM, Chief Architect
Norton Stanley

IBM

Storage Architect

Supply Chain Security for the Everyday Engineer

Pradumna Saraf

Kestra Technologies

Quality Assurance Engineer

Speed or Security? Why Not Both for Your Coding Agents

Ajeet Raina

Docker

Developer Advocate

Related videos

OPA for the cloud natives thumbnail

OPA for the cloud natives

Philipp Krenn

World Congress · 2023

Decoupled Authorization using Policy as Code thumbnail

Decoupled Authorization using Policy as Code

Anderson Dadario +1

LIVE · Oct 2020

One Pipeline, Three Regulator - SBOM Compliance for the Developer thumbnail

One Pipeline, Three Regulator - SBOM Compliance for the Developer

Marcus Ross · Die Techniker

World Congress Europe · 2026

Great DevEx and Regulatory Compliance - Possible? thumbnail

Great DevEx and Regulatory Compliance - Possible?

Martin Reynolds · Harness

World Congress · 2025

Un-complicate authorization maintenance thumbnail

Un-complicate authorization maintenance

LIVE · May 2024

It passed auth, then production caught fire thumbnail

It passed auth, then production caught fire

Alex Olivier · Cerbos

World Congress North America · 2026

Related articles

AC

Alex Casalboni

DC

Daniel Cranney

Your Rollback Plan is Too Slow and How to Fix It

Back in 2025, two of the most mature engineering organisations on the planet went down, with giants Cloudflare and Google Cloud suffering global outages. Interestingly, postmortems into both reache...

13 days ago

A neon-lit conveyer belt to represent continuous deployment

CH

Chris Heilmann

The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024

Scott gave us an exciting look into the future of open source in his talk at the WeAreDevelopers World Congress 2024! Discover how the community evolves, lessons from GitHub, and the challenges of ...

about 2 years ago

The Future of Open Source: A Deep Dive - Scott Chacon at WeAreDevelopers World Congress 2024

DC

Daniel Cranney

Building an Agentic Software Factory

Could your software be fully automated? That was the question put to the main stage audience at WeAreDevelopers North America by Entire CEO Thomas Dohmke and Factory CEO Matan Grinberg. While most ...

9 days ago

A website's UI with labels around for different AI agents, like code quality, security, backend, marketing and so on.

DC

Daniel Cranney

Do You Trust Your Agents? Five Quick Ways to Contain Them

Do you trust your agents? Most of us use coding agents every day now. Give one a vague request, walk away, and come back to a pile of mostly working software. It’s brilliant, right up until you rem...

17 days ago

An image of a cube-shaped container with a ball of light inside of it

From learning to earning

Jobs that call for the skills explored in this talk.

Principal Software Engineer, Copilot Code Review

San Francisco, CA, United States

Expert Ruby Golang Github

Staff Security Data Engineer

Experienced Remote Github Airflow Terraform

Staff Developer Advocate, GitHub Security Lab

San Francisco, CA, United States

Experienced $323k Git Github Databases

Cybersecurity Engineer - Google Secops/Siem | Managed Services Operations

Cleveland, OH, United States

Experienced Splunk QRadar Github

about 1 month ago

Senior Software Engineer, Observability Delivery

San Francisco, CA, United States

Expert $329k Ruby Golang Github

about 2 months ago

Cloud Engineer (German)

Barcelona, Spain