Documentation
All articles tagged Documentation.
Cerbos PDP v0.55.0: Strict evaluation mode, multiple JWTs, and faster conditions
Cerbos PDP v0.55.0 adds strict evaluation mode, which turns runtime errors in policy conditions into explicit denials instead of silent skips. This release also lets auxData carry multiple named JWTs, folds constant expressions at compile time, and upgrades CEL with 21 new expression functions for networking, regex, and sets.
What's new in Cerbos Hub: audit log exports and a playground that tells you what's wrong
A rundown of the latest Cerbos Hub updates. Audit log exports you can pull into your own tooling for archiving or compliance, playground compiler errors with line and column detail, schema validation on principal and resource fixtures, and egress IPs for GitHub allow lists.
Mapping business requirements to authorization policy
Learn about how to map your business requirements to RBAC and ABAC policies and adopt Cerbos
Agent skill for writing authorization policies in VSCode
A practical guide to writing authorization policies in VSCode using GitHub Copilot agent mode and the Cerbos policy skill. Covers install, the gh skill CLI, chat.agentSkillsLocations, file-scoped *.instructions.md, a typical drafting session, and how validation runs in the integrated terminal.
Cerbos PDP v0.54.0: Faster evaluations, lower memory usage, and new store diagnostics
Cerbos PDP v0.54.0 focuses on performance, cutting steady-state memory and raising throughput. This release adds the new cerbos compile-store command for diagnosing policy stores, clearer error reporting across policies and tests, automatic GOMEMLIMIT from cgroup limits, and better runtime observability.
Agent skill for writing authorization policies in Cursor
Cursor's composer makes it a strong fit for authorization policy work. This guide walks through installing the Cerbos policy skill in Cursor, describing access rules in plain English, letting the composer pull schemas and derived roles into context, validating against the real compiler in the integrated terminal, and producing a complete policy bundle.
Agent skill for writing authorization policies in Codex CLI
A practical guide to writing authorization policies in Codex CLI using the Cerbos policy skill. Covers cross-agent installer setup, $cerbos-policy invocation, the /skills list command, a typical drafting session, validation against the real Cerbos compiler in Docker, and composing the skill with AGENTS.md.
Automating Cerbos Policy deployments with CircleCI
This guide will help you set up a CI/CD pipeline in CircleCI to upload your Cerbos policies to a Cerbos Hub store automatically.
Automating Cerbos Policy deployments with Azure DevOps Pipelines
This guide shows you how to set up an Azure DevOps Pipeline to upload your Cerbos policies to a Cerbos Hub store automatically.
Automating Cerbos Policy deployments with BitBucket Pipelines
This guide shows you how to set up a BitBucket Pipeline to upload your Cerbos policies to a Cerbos Hub store automatically
Automating Cerbos Policy deployments with GitLab Runners
This guide shows you how to set up a GitLab CI/CD pipeline to upload your Cerbos policies to a Cerbos Hub store automatically.
Agent skill for writing authorization policies in OpenCode
OpenCode is open source, self-hosted, and provider-agnostic, so the whole authorization policy workflow stays inside your security perimeter. This guide walks through installing the Cerbos policy skill in OpenCode, drafting policies in plain English, validating against the real Cerbos compiler locally, and pairing the skill with AGENTS.md.
Automating Cerbos Policy deployments with Buildkite
This guide will help you set up a CI/CD pipeline in Buildkite to upload your Cerbos policies to a Cerbos Hub store automatically.
Automating Cerbos Policy deployments with GitHub Actions
This guide shows you how to set up a GitHub Actions workflow to upload your Cerbos policies to a Cerbos Hub store automatically.
Agent skill for writing authorization policies in Pi
Pi is the open-source self-extensible coding agent built around the Agent Skills standard from the start. This guide walks through installing the Cerbos policy skill in Pi, invoking it with /skill:cerbos-policy, drafting authorization policies in plain English, and validating against the real Cerbos compiler in Docker.
Mastering hierarchy-based permissions with Cerbos: Policy-defined roles vs. dynamic attributes
Learn how to handle authorization in applications with hierarchical data. In this post, we explore two approaches to implementing hierarchy-based permissions. Both methods leverage Attribute-Based Access Control.
The Cerbos Hub effect matrix: read your authorization policy at a glance
See how the Cerbos Hub effect matrix turns authorization policy files into a permissions grid of roles and actions, with allowed, denied, and conditional outcomes. Read what each role can do without parsing raw policy, drill into ABAC conditions, and spot over-permissive wildcard rules in review.
Agent skill for writing authorization policies in AWS Kiro
AWS Kiro is spec-driven, which means the access model is captured properly before any YAML gets written. This guide walks through installing the Cerbos policy skill in Kiro, the spec-then-policy workflow, how the skill picks up AWS Cognito attributes, and how validation runs against the real Cerbos compiler.