Secure software supply chain with Azure Pipelines artifact policies

This post introduces a preview capability for Azure Pipelines that allows users to define and enforce artifact policies before deploying to critical environments. It explains the concept of a software supply chain and how artifact policies can be used to automate the validation of application artifacts. The feature is configured as a 'Check' on an 'Environment' and uses Open Policy Agent for policy evaluation. The post details how metadata is attributed to artifacts and how policies are evaluated against deployable images, halting the pipeline if compliance is not met. It also provides links to documentation for artifact policy checks, custom policy writing, and sample policies.