generate-policy

Auto-generating Conforma validation policies requires describing your policy goals, which produces a complete policy set directory containing rules, tests, policy.yaml, and data files ready for container image validation.

Conforma policy generation creates validation setups for container images by producing Rego rules and verifying tests with OPA, ensuring all generated policy rules pass validation before outputting a ready-to-run ec validate command.

You do not need prior knowledge of Rego, SBOM formats, or policy scaffolding to create validation policies, as the generation process guides you through creating production-ready configurations for SBOM and registry validations.

Setting up a complete Conforma policy set involves providing your validation requirements, which generates a canonical directory structure with policy rules, tests, and a ready-to-run command for validating container images.

Validating licenses and SBOM formats can be done without manually writing policy.yaml by prompting the tool with your requirements, which auto-generates the necessary data files and policy configurations.

When missing inputs are detected during policy generation, the process automatically prompts you to supply the required information, ensuring the final output is a complete and verified Conforma validation setup.