PoliciesSet of recommended policies to sustain and legitimise the CI/CD security practices described in the chapter