Use TMC’s policy templates to enforce Pod Security Standards (PSS) at the cluster group level.

# Sample ClusterSupplyChain snippet (Cartographer) apiVersion: carto.run/v1alpha1 kind: ClusterSupplyChain metadata: name: secure-java-chain spec: selector: app-type: spring-boot stages: - name: source-provider templateRef: git-source-template - name: security-scan templateRef: grype-scan-template conditions: - keyword: "CRITICAL" operator: "=" value: "0" - name: image-builder templateRef: tbs-build-template - name: image-scan templateRef: harbor-scan-template - name: policy-check templateRef: opa-template - name: deployer templateRef: gitops-deploy-template