> For the complete documentation index, see [llms.txt](https://docs.clouddefenseai.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.clouddefenseai.com/ci-cd/ci-cd-policies.md).

# CI/CD Policies

{% embed url="<https://youtu.be/pcBv8wQtnfk>" %}

During a CI/CD pipeline, there are multiple ways a developer can make a build pass or fail by using <https://console.clouddefenseai.com/compliance> policies like the following

### OSS Policy Licenses

<figure><img src="https://lh4.googleusercontent.com/GxSgQ2O9XajmpIwv64nHVbtFUAX-CWlmENglNZ2qJq0VDLbtFT6T9-2j-975QZRBmaZRtQxJLRteWTqMzwI6EXEeCEpQ_qMCDE2yLaAS2FV7qi5Lhv6Of539ktMqe_5iXRdMkFUFBfFw-yncQDDjUZf4V3uWS3fp41xsokArS56iwu9uOL2aFOC5rQ" alt=""><figcaption></figcaption></figure>

With this a developer need to add the license either in Approved or Denied list via drag and drop

<figure><img src="https://lh6.googleusercontent.com/sZQ8OFnsSroJq3YH1w8PaszlRxRdYl0_KJUvssZxzPJla1KmTXAWsjrG50KFxvDhjme_wre5mIE1rJRCFQqS804FjJ-9eU_XmsJLc1uxNo9QeZi4TSliIn11fCDaUBXFDv6Y8M406cAWd09jLvKfC-jke4fb1S1lDMwTEkqYiehQ37Z1Z8CN5_A8qw" alt=""><figcaption></figcaption></figure>

Any license detected by our scan, if it’s in approved list the build will pass from the CI/CD if not then it will fail the build

### Build Policy List

<figure><img src="https://lh3.googleusercontent.com/AiO8jtexrQSefIZquQcwhBYr94p98AwR40PFNBEElM3FTsF8LZJUGWPmXq2qDaPMtsHn6fq3l_1TMHPKfncLceEk3Po0g0FbGlUXSqV6ITvuEaPvw6-ydM26LFAWS6JUc-bHOGRmxMfbGJ0qQ6e-bVEmUj52eyfuunyp8F2mS8St-b79TS7bGHzFUw" alt=""><figcaption></figcaption></figure>

With this feature a developer scan pass or fail a build based on the criteria like,

1. Secrets Detection&#x20;
2. Owasp Top 10 Detection&#x20;
3. Vulnerability Count&#x20;
4. ID/CVE/CWE Match

<figure><img src="https://lh4.googleusercontent.com/qD99DPDMaP1Bun-3yhheeOoLoZjhYMak79sLA9-Semc62TEQkhTVyqIJRjCFiFknrJIY5MrNXYSD67lIs3-oYKnw5zk9FNYi8HTl2YDjYcKkF854M3t2in5Gt8BXDqRFKmjDJVrD2xrDghvGZQ9j_kib_Zz7232ZwjWbMmC89cM7CStm8Q1QWfzgJA" alt=""><figcaption></figcaption></figure>

Any number or criteria set can will make a build stop or pass during a CI/CD pipeline