endor-policy

Create and enforce Endor Labs security policies across a namespace.

2|Updated Feb 4, 2026
One-click install
npx skills add https://github.com/endorlabs/skills-ideas --skill endor-policy-endorlabs
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: endor-policy
Source: https://github.com/endorlabs/skills-ideas/tree/main/skills/endor-policy
Command: npx skills add https://github.com/endorlabs/skills-ideas --skill endor-policy-endorlabs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Endor Labs security policy management automates the definition, governance, and enforcement of security policies across a namespace, reducing risk and manual review overhead.

Core Features & Use Cases

  • Policy types for Finding, Exception, and Action policies to automate security controls.
  • Templates for common governance rules (block critical vulnerabilities, license compliance, secrets scanning, etc.).
  • Policy workflow: list, create, update, and delete policies, with audit-ready metadata and justifications.

Quick Start

Create and apply a policy in your namespace to enforce a security rule before merging code.

Frequently Asked Questions about endor-policy

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I enforce security policies across a namespace to block critical vulnerabilities?

To enforce security policies across a namespace, you can create FindingPolicy and ActionPolicy workflows using templates. This automates governance controls to block critical vulnerabilities before merging code.

What security policy templates are available for compliance and secrets scanning?

Available security policy templates include rules for license compliance, secrets scanning, and blocking critical vulnerabilities. These templates automate common governance controls and reduce manual review overhead.

Can I manage policy exceptions and justifications for security findings?

Yes, you can manage policy exceptions using ExceptionPolicy workflows. This allows admins to create exceptions with audit-ready metadata and required justifications for specific security findings.

How do I automate the policy lifecycle for security governance via API?

You can automate the security policy lifecycle via API-driven management to list, create, update, and delete policies. This provides admin-grade governance and policy validation across your namespace.

Does Endor Labs policy enforcement work with existing CI/CD workflow rules?

Endor Labs policy enforcement integrates with your workflow by applying FindingPolicy, ExceptionPolicy, and ActionPolicy rules. This ensures security controls are validated and enforced before code merges.