apiVersion: policy.stellaops.io/v1
kind: PolicyOverride
metadata:
  name: starter-day1-dev
  version: 1.0.0
  parent: starter-day1
  environment: development

spec:
  settings:
    defaultAction: warn
    unknownsThreshold: 0.20
    requireSignedSbom: false
    requireSignedVerdict: false

  ruleOverrides:
    - name: block-reachable-high-critical
      action: warn
    - name: block-kev
      action: warn