Sigstore Policy Controller policiesDocumentation and resources relating to policies in Sigstore Policy Controller.Enforce SBOM attestation with Policy ControllerDisallowing non-default capabilitiesDisallowing privileged podsDisallowing run as root userMaximum container image ageDisallowing unsafe sysctlsVerify signed Chainguard ContainersLimit high or critical CVEs in your images workloadsRego policiesExample policies