Tirith policy check
Run Tirith against the plan with policies from a Git repo and fail on violations.
About
Run Tirith against the plan with policies from a Git repo and fail on violations.
This is a placeholder for a step we are considering. It is not in the library yet. Custom steps run today: any container image can be a workflow step, so you can build this yourself now and tell us if you want it maintained.
Use cases
- Use the same policies locally, in CI and in the platform.
- Shared rules across teams with one place to change them.
Inputs
Inputs will be defined with the step. Expect a connection or token (stored as a secret), a target such as a channel or project, and thresholds.
What it creates
How it runs on StackGuardian
Add it to a workflow as a step. It runs in its own container alongside the IaC steps.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.