---
title: "Policy-as-Code in the software supply chain"
url: https://daily.dev/posts/policy-as-code-in-the-software-supply-chain-evp6wnfqt
source_url: https://www.cncf.io/blog/2024/02/14/policy-as-code-in-the-software-supply-chain/
type: article
source: "CNCF"
published: 2024-02-14T16:05:18.980Z
updated: 2026-03-30T02:18:11.533Z
tags: ["compliance", "open-source", "policy-as-code", "security"]
reading_time: 11
upvotes: 2
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Policy-as-Code in the software supply chain

**[CNCF](https://daily.dev/sources/cncf)** · 11 min read · 2 upvotes · 0 comments

## Summary

Policy-as-Code is a modern approach that combines software engineering principles with operational and security guidelines to enhance compliance, consistency, and efficiency in software supply chains. It focuses on creating, distributing, and evaluating policies for secure software supply chains. The implementation of policies spans various domains, including infrastructure, platform, source, build, and execution. Effective policy design and evaluation require accuracy, evaluation, and confidence. Trust establishment, policy distribution, and evaluation are crucial aspects of policy implementation. Policy-as-Code tools, such as gatekeepers and policy languages, can be used for policy implementation, enforcement, and evaluation.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://www.cncf.io/blog/2024/02/14/policy-as-code-in-the-software-supply-chain/>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments
- [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments
- [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments

---

Tags: [#compliance](https://daily.dev/tags/compliance), [#open-source](https://daily.dev/tags/open-source), [#policy-as-code](https://daily.dev/tags/policy-as-code), [#security](https://daily.dev/tags/security)

[View this post on daily.dev](https://daily.dev/posts/policy-as-code-in-the-software-supply-chain-evp6wnfqt)