Governed Software Delivery

Platform Concepts: Governance and security

• With Harness, governance is built into the platform from the ground up and centrally managed.
• Policies define what the guardrails should be and the Harness open policy agent enforces all of the rules, all of the time.
• When teams adhere to policies, governance is still tracked- but invisible.

A) Enable policy

1. On the left nav, click Organization settings.
2. Click Policies, then Policy Sets in the top right corner.
3. One person, acting as the security team, enables the security policy.

B) Policy is enforced, Duh...duh.... DUUUUH!

1. In the left nav, click on the scope selector top left.

2. Select your project, and click Pipelines if necessary in the left nav.

3. Click on the "Fastlane-Java" pipeline.

4. Click on Java Build, then on the Execution tab in the middle.

5. As nefariously as possible (this is important)- hover over the Owasp security step until you see the blue X and click to delete.

   

6. Click save in the top right corner. Review the policy enforcement notice.

7. Click Discard in the top right corner to restore your pipeline to all necessary steps.