Policy templates for CI/CD tool detection
Endor Labs provides the following finding policy templates for detecting CI/CD tool usage. See Finding Policies for details on on how to create policies from policy templates.
| Policy Template | Description | Severity |
|---|---|---|
| Unauthorized Tool Usage | Raise a finding if a repository uses a tool that is specifically not approved by the company policy. | Medium |
| Require Tool Category | Raise a finding if a repository does not have any tools in a required tool category. | Medium |
| Require Tool | Raise a finding if a required tool is not detected in a repository. | Medium |