How do I create a CI/CD policy for code secrets?

To create a CI/CD Policy for code secrets follow the steps below:

  1. Login into I3 Portal
  2. Using the left floating menu navigate to Policies —> Create
  3. Specify a Policy Name, select the Policy Type as Code Secrets and click Next
  4. Select the Policy Template as No secrets in source code and click Next
  5. As part of policy configuration:
    • Specify the exit code that should be returned by TWIGS if there are any secrets found in the source code i.e. policy evaluation failed. In your CI/CD pipeline where you launch TWIGS, you can check for this exit code and take appropriate actions.
    • Enable this policy for use and click Next
  6. Review the policy and click Create Policy button