language
Policy language used to author Cloudsmith's policy templates for baseline controls across DevOps workflows.
JFrog is deprecating Xray's Block Download between April and November 2026 and moving enforcement into Curation, a product licensed per seat. Teams who use Xray as their gate have eight months to fund a replacement.
Reality
Arcjet's new product evaluates an agent's next action inside application code, returning an allow or deny before the tool call runs, with policies written in Rego and managed centrally by the security team.
Reality
The New Stack's three-pillar recipe for cloud resource ownership pairs a CloudQuery inventory query with an env0 admission policy and a creation-time audit record. Two of them look for the owner in different places.
Reality
EU Cyber Resilience Act enforcement starts in September with personal liability for security leaders written in, according to JFrog, so the lag between an auditor's request and the proof now has a named owner.
Reality
The default rule set ships on in warning mode from aws-cdk-lib v2.261.0. Strict mode is one context key away, and the exit-code change on declined prompts is the quieter risk.
Reality
Blocking newly published packages from being indexed treats ingestion speed as the attack surface. The cooldown window is a policy call platform teams have to own, not a switch they flip.
Reality