Policy As Code

by BagelHole

Policy As Code is a DevOps skill for Claude Code, published by BagelHole in DevOps-Security-Agent-Skills.

709 stars89 forkson BagelHole/DevOps-Security-Agent-SkillsAdded 2026/08/24+1343% in starsRepository updated 2026/05/22

View source on GitHub Download repo ZIP

agent-skillsagentic-aiai-agentsawscheatsheetscompliancedevopsdockerinfrastructure-as-codekubernetessecuritysreterraform

Install in seconds

Install Policy As Code

Copy Policy As Code into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/BagelHole/DevOps-Security-Agent-Skills/tree/main/compliance/governance/policy-as-code ~/.claude/skills/policy-as-code

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/BagelHole/DevOps-Security-Agent-Skills.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: compliance/governance/policy-as-code/SKILL.md in BagelHole/DevOps-Security-Agent-Skills
Installs to: ~/.claude/skills/policy-as-code
Collection: One of 25 skills cataloged from this repository
Category: DevOps — 798 skills

What Policy As Code does

Policy As Code implements policy checks with OPA/Rego, Kyverno, and related tools to enforce compliance in CI/CD and infrastructure. Use it to block unsafe Terraform, Kubernetes, and cloud changes before deployment.

Policy As Code is cataloged under DevOps on DirSkills. Policy As Code comes from a repository tagged agent-skills, agentic-ai, ai-agents, aws and cheatsheets.

Documentation

README

Excerpt

Policy as Code

Automate policy enforcement through code using OPA/Rego, Kyverno, Checkov, and CI/CD integration to prevent compliance violations before they reach production.

When to Use

Enforcing security and compliance policies on infrastructure-as-code changes
Preventing misconfigured Kubernetes workloads from deploying
Automating guardrails in CI/CD pipelines for Terraform, CloudFormation, or Helm
Implementing organizational standards that must be consistently applied
Replacing manual approval gates with automated policy checks

Open Policy Agent (OPA) Rego Policies

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Policy As Code

What else does BagelHole publish alongside Policy As Code?
Policy As Code is one of 25 skills that DirSkills catalogs from BagelHole/DevOps-Security-Agent-Skills, the repository it ships in. Its siblings there include AI Pipeline Orchestration, AI SRE Incident Response and AWS CloudTrail. Each one is a separate skill with its own page in this directory, installs the same way Policy As Code does, and is maintained by BagelHole in that same repository. The rest of the collection is listed on the BagelHole/DevOps-Security-Agent-Skills page.
How does Policy As Code compare to other DevOps skills?
Policy As Code ranks #596 by stars among the 798 DevOps skills in this catalog. The most-starred ones next to it are Backend Patterns, API Connector Builder and Migration. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Policy As Code against them. Open each page to compare what they document and how they install.