reynold
8b6e3b4919
Add synthetic fixtures and proposed policy contracts for safely demonstrating future Lariza capabilities. Assisted-by: Codex: GPT-5.6
18 lines
451 B
YAML
18 lines
451 B
YAML
apiVersion: security.lariza.dev/v1alpha1
|
|
kind: SecurityPolicyIntent
|
|
metadata:
|
|
name: default-security-gate
|
|
spec:
|
|
mode: audit
|
|
trustedPublishers: [lariza-security-demo]
|
|
mergeGate:
|
|
blockNewSeverities: [critical, high]
|
|
requireTriageFor: [medium]
|
|
dismissedFindingsRequire:
|
|
reason: true
|
|
expiresAt: true
|
|
approverRole: security-owner
|
|
evidence:
|
|
acceptedFormats: [sarif-2.1.0, cyclonedx-1.5, junit]
|
|
retainDays: 90
|