CI/CD Compliance
GitHub & Bitbucket compliance overview
Infrastructure Governance
Aegis evaluates HCP Terraform plans after GitHub Actions calls the gate. Leads review exceptions and maintain policies here.
1. PushDeveloper pushes Terraform to GitHub (or opens a PR).
2. HCP planHCP Terraform calculates the proposed plan for that commit.
3. GitHub ActionsThe workflow waits for the plan, then POST /api/iac/gate.
4. AegisOPA Rego security/compliance rules plus Python cost limits.
5. Lead / adminMonitor results, approve exceptions, maintain the catalogue.
7-Day IaC Summary
Loading summary…
Approval Requests
Review outcomes are auto-queued here as an asynchronous compliance audit. CI continues (exit 0); a lead inspects in the dashboard. Block still fails the pipeline.
No approval requests yet.
Workspaces
Optional manual speculative plan. The live path is GitHub push → HCP Terraform → GitHub Actions → Aegis gate.
No IaC integrations configured yet.
Recent Plan Runs
All plan runs across your connected integrations. Dashboard-triggered runs are speculative (plan-only); apply happens on the linked HCP workspace after the gate.
No plans triggered yet.
Connected Integrations
Each integration stores one Terraform Cloud token. Workspaces are loaded from the selected integration.
No integrations connected yet.
Connect Terraform Cloud
Admin only. Token is encrypted at rest.
Cost Policy Thresholds
Default policy: 50 / 200 / 500
Admin only. Must satisfy warn < escalate < block.
Policy Catalogue
Hybrid catalogue: OPA Rego for access, exposure, encryption, and logging; Python (`iac_cost_service.py`) for cost thresholds; `decision_engine.py` merges both into permit / block / review.
Loading catalogue…
Policy evaluation
Nine controlled Terraform-plan scenarios used for accuracy, block-detection, and enforcement-time evidence.
Load evaluation metrics to see accuracy and the confusion matrix.
Test scenarios
Loading scenarios…
Expert rating
Optional 1–5 ratings for later validation. Leave empty until reviewers are recruited.
Loading security posture…
No integrations found
Connect GitHub or Bitbucket on the CI/CD tab first, then scan security posture here.
Loading QA compliance…
No integrations found
Connect GitHub or Bitbucket on the CI/CD tab first, then review QA checks here.
Loading integrations…
No integrations yet
Connect a GitHub organisation or Bitbucket workspace to start tracking compliance.