Policy Checks
Note: This is a Liquibase Pro feature, so you need a Liquibase Pro License Key to use it.
Liquibase Policy Checks allow you to define and adhere to code standards to ensure compliance and data quality. Using Policy Checks, you can analyze your changelogs, changesets, and SQL for specific commands and patterns that require close review early in the development life cycle. You can integrate this feature into your build and deployment automation.
Business Benefits
Policy Checks deliver the following benefits:
- Reduce Errors and Risk: Automatically enforce consistent and high-quality changes that meet your governance requirements.
- Stay Compliant: Catch non-compliant changes and notify developers with Checks Reports in your automation pipeline.
- Increase Productivity: Reduce manual reviews by enforcing policy standards automatically in your CI/CD pipeline.
- Ensure Data Quality: Enforce code standards and correct nomenclature, patterns, and labels to ensure data is entered correctly.
Example Scenarios
- Enforce Standards: Quickly and easily validate naming standards, column links, and other common changes.
- Access/Privileges: Secure your database by getting immediate notice that user and role privileges are being modified.
- Custom Policy Checks: Write unique Policy Checks customized to your organization’s governance standards.
High-Level Architecture
This is a high-level overview of how Policy Checks fit together:
- Define policies to be enforced in a central location.
- Integrate checks into automation to validate each change.
- Review checks report.
Implement Policy Checks
-
Set up policy checks for your team
- Identify the Policy Checks desired by your team. Library of Policy Checks
- Create a package of Policy Checks. Policy Checks Packages
-
Integrate policy checks into manual and automated deployments
- Test policy checks in the CLI using commands. Policy Checks Commands
- Integrate Policy Checks into your automation process. Use Policy Checks in Automation: Severity and Exit Code
Review and Share Your Checks Report
Automatically generate a Checks Report using the Liquibase checks run
command. The Checks Report gives you an easy-to-read, sharable summary of command metadata, warning messages, check severity levels, checks packages, and configuration details, plus an organized summary of check output in a browser page