Cloud Native Best Practices: Security Policies in CI/CD Pipelines

**Executive Summary:** This guide explains how to integrate Aqua Cloud Native Security Platform (CSP) into CI/CD pipelines to scan and enforce policies on container images—covering assurance policies, approved base images, exception handling (acknowledgements, policy-level exceptions, whitelisting)—and recommends deploying the Aqua Enforcer on hosts to enforce runtime protection against unauthorized images.