Red Hat Summit 2026: From SBOM to Enforcement — Writing License Policies with Conforma

We’re excited to share that Conforma was featured at Red Hat Summit 2026. The talk demonstrates writing a Conforma policy rule from scratch to solve a real-world license compliance challenge.

The Challenge: License Compliance at Scale

Your legal team mandates “no AGPL” in container images. With hundreds of packages per image, manual checking doesn’t scale across multiple teams, constant updates, and the inevitable special cases where specific packages have been individually approved. Organizations need automated enforcement — not just data collection.

From First Rule to Production-Ready

The demo walks through writing a license policy rule using Rego, starting with a straightforward rule and evolving it commit by commit. Violation messages become more specific. Exceptions handle approved packages. The policy extends to work with SBOMs from multiple sources. Each change is small and purposeful, showing how Conforma and Rego turn requirements into enforceable rules.

Watch the demo

Watch a license policy evolve from a simple rule to production-ready enforcement. The demo recording and presentation slides are now available on our Resources page.

Watch “From SBOM to Enforcement: Writing License Policies with Conforma”