# Sigstore Policy Controller policies

URL: https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies.md

## Pages

- [Enforce SBOM attestation with Policy Controller](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/enforce-sbom-attestation-with-policy-controller.md): Enforce SBOM attestation with Policy Controller
- [Disallowing non-default capabilities](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/disallowing-non-default-capabilities-with-policy-controller.md): Using Policy Controller to prevent running pods with extra capabilities
- [Disallowing privileged pods](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/disallowing-privileged-containers-with-policy-controller.md): Using Policy Controller to prevent running privileged pods
- [Disallowing run as root user](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/disallowing-run-as-root-user-with-policy-controller.md): Using Policy Controller to prevent running pods as root
- [Maximum container image age](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/maximum-image-age-policy-controller.md): Maximum container image age with Policy Controller
- [Disallowing unsafe sysctls](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/disallowing-unsafe-sysctls-with-policy-controller.md): Use Policy Controller to limit pods to safe sysctls
- [Verify signed Chainguard Containers](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/using-policy-controller-to-verify-signed-chainguard-images.md): Using Policy Controller to verify signed Chainguard Containers
- [Limit high or critical CVEs in your images workloads](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/critical-cve-policy.md): How to use the vulnerability attestation with no high or critical CVEs policy
- [Rego policies](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/chainguard-enforce-rego-policies.md): Writing Rego-based policies for Sigstore Policy Controller
- [Example policies](https://deploy-preview-3742--ornate-narwhal-088216.netlify.app/open-source/sigstore/policy-controller/policies/chainguard-enforce-policy-examples.md): Policy recipes