skills.rest
Endor-Solutions-Architecture
Endor-Solutions-ArchitectureOFFICIAL
Explore all skills by this author →
GitHub

endor-policy

Automate security policy enforcement across Endor Labs development workflows.

2|Updated Feb 4, 2026
Search Tags:#MCP#compliance#policy#security-policy#block-pr#endorctl
One-click install
npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-policy
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: endor-policy
Source: https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills/tree/main/.claude/skills/endor-policy
Command: npx skills add https://github.com/Endor-Solutions-Architecture/endor-solutions-claude-skills --skill endor-policy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Create, view, and manage security policies for automated enforcement across software projects, enabling governance rules that block risky changes and ensure compliance.

Core Features & Use Cases

  • Policy Types: FindingPolicy, ExceptionPolicy, and ActionPolicy for automated enforcement.
  • Templates: block-critical-reachable, license-compliance, sast-required, no-secrets, sbom-required, dependency-age, max-severity.
  • Workflow: List existing policies, create new policies, create exceptions, and guide policy creation for collaborators.
  • Use Case: Block PRs with critical vulnerabilities or licenses that violate constraints; require SAST or SBOM in release pipelines.

Quick Start

Run Endor Labs MCP commands to view or create policies for governance. For example:

  • List policies: npx -y endorctl api list --resource FindingPolicy -n $ENDOR_NAMESPACE 2>/dev/null
  • Create policy: npx -y endorctl api create --resource FindingPolicy -n $ENDOR_NAMESPACE 2>/dev/null --data '{ "meta": { "name": "example", "description": "example policy" } }'

Frequently Asked Questions about endor-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate security policy enforcement to block pull requests?▼

Automate security policy enforcement by creating FindingPolicy and ActionPolicy rules in Endor Labs to block PRs containing critical vulnerabilities or license violations. You configure these policies to automatically govern development workflows.

How do I set up an exception for a blocked pull request?▼

Set up a pull request exception by creating an ExceptionPolicy using the Endor Labs MCP server. This allows you to override specific governance rules and unblock PRs when justified.

Do I need an Endor MCP server and Node.js to enforce compliance policies?▼

Yes, enforcing compliance policies requires an Endor MCP server, the endorctl CLI, and a Node.js 18+ environment. These components provide the necessary runtime and API access to manage security governance.

What security policy templates are available for CI/CD pipelines?▼

Available security policy templates for CI/CD pipelines include block-critical-reachable, license-compliance, sast-required, no-secrets, sbom-required, dependency-age, and max-severity to enforce governance rules.

How do I list existing security policies in my namespace?▼

List existing security policies by running the endorctl api list command with the FindingPolicy resource and your Endor namespace. This queries the MCP environment to return all active governance rules.

Can I require SAST or SBOM generation in release pipelines using policy templates?▼

Yes, you can require SAST or SBOM generation in release pipelines by applying the sast-required or sbom-required policy templates. These ActionPolicies enforce compliance checks before software releases proceed.

Related Skills

Explore More Legal & Compliance Skills→
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-scan

Scan code repositories for vulnerabilities, license issues, and secrets.

Official
Advanced
daemon-blockint-techdaemon-blockint-tech
7

devsecops

Automate SAST/SCA, SBOM generation, and policy enforcement in CI/CD pipelines.

Community
Advanced
endorlabsendorlabs
2

endor-findings

Display and filter Endor Labs security findings by severity, reachability, and category.

Official
Intermediate
Endor-Solutions-ArchitectureEndor-Solutions-Architecture
2

endor-review

Analyze Git changes for security risks before merging pull requests.

Official
Advanced