An Empirical Study of Policy as Code: Adoption, Purpose, and Maintenance

Proceedings of the 23rd International Conference on Mining Software Repositories 2026 Open access

Read full text
Authors: Ruben Opdebeeck, Mahmoud Alfadel, Akond Rahman, Yutaro Kashiwa, João F. Ferreira, Raula Gaikovina Kula, Coen De Roover
DOI: 10.1145/3793302.3793355
Cited by: 1
References: 75

Abstract

Policy as Code (PaC) is an emerging DevOps practice that enables teams to specify organisational and technical policies, such as regulatory compliance, security requirements, and resource limits, through machine-enforceable declarative code. As PaC gains prominence, practitioners face difficulties in adopting PaC while there remains a limited empirical understanding of how these policies are introduced, what types can be expressed, and how they are maintained in practice.

Publication details

Journal / source
Proceedings of the 23rd International Conference on Mining Software Repositories
Publisher
ACM
Pages
249–261
Publication date
13 April 2026
Language
EN