Centralized Compliance: Automated Governance Inside of Backstage...
summary
Backstage is extended with reusable front-end and back-end plugins (published on npm) that pull GitHub pipeline attestations into entity pages and a new release card showing the latest four releases with pass/fail status. Pipelines produce signed attestations for scans, builds and tests, policies run via OPA policies against those attestations, and results are centralized in Backstage so teams can filter by compliant repositories; demo shows the plugin installed and working end-to-end, displaying policy failures and hoverable failure messages.
AI-written summary · about
chapters (11)
- 0:00Automated governance in Backstage
- 1:29Compliance without automation
- 3:17Automated governance in pipeline
- 5:43GitHub pipeline demo
- 8:18Centralized compliance in Backstage
- 10:04Compliance status on entity pages
- 11:55Compliance plugin setup
- 13:44Centralized compliance visibility
- 15:12Automated governance benefits
- 16:37Automation speeds development
- 17:22Q&A
related talks
27mIntroduction to Backstage
06mLevel-up your software standards with Backstage
28mHow Did Backstage Make 500+ Developers Happy in a Highly Regulated Enterprise
39mUnlocking Backstage's potential: insights and solutions for a smoother developer experience
07mAccelerating Backstage Adoption in Enterprises
10mCompliance as Code Meets Developer Portals: Kyverno + Backstage in...
35mBackstage: Restoring Order To Your Chaos
32mIs Backstage for me?