[Join Slack](https://community.cerbos.dev/api/link/3c13b2a7-f80e-45a9-80c2-decea3779018/join) Channels [announcements](https://community.cerbos.dev/c/announcements) [community](https://community.cerbos.dev/c/community) [help](https://community.cerbos.dev/c/help) [Powered by](https://www.linen.dev/) \# announcements Emre (Cerbos) 07/25/2022, 3:01 AM Hi **@Jamie Shepherd** Welcome to the Cerbos Community 👋 How did you hear about Cerbos? Luca Carangella 09/05/2022, 11:38 AM We are introducing NestJS in our system, and obviously, we will make it work with Cerbos! 🤘 🤘 3 twitter 12/23/2022, 4:49 AM [https://twitter.com/cerbosdev/status/1606225548828479488](https://twitter.com/cerbosdev/status/1606225548828479488 "") We spoke to [@EnginBainAC](https://twitter.com/EnginBainAC ""), the Head of Product and Growth, and Co-Founder of [@Debite\_io](https://twitter.com/Debite_io ""), to understand why Debite implemented Cerbos — and how Debite was able to ship their products faster and GTM very quickly, through said partnership. [https://t.co/TN0Rnmxv8Y](https://t.co/TN0Rnmxv8Y "") #authorization [https://t.co/rSwWpj8HUO](https://t.co/rSwWpj8HUO "") Twitter twitter 12/26/2022, 10:01 AM [https://twitter.com/cerbosdev/status/1607391078168285188](https://twitter.com/cerbosdev/status/1607391078168285188 "") Cerbos is completely open-source & easy to get up and running. You are also able to self-host it. Allowing Cerbos to be self-hosted enables you to operate more efficiently because the response times are within milliseconds. #OpenSource #TechTwitter #authorization #OSS #SaaS Twitter twitter 01/03/2023, 4:00 AM [https://twitter.com/cerbosdev/status/1610199482859245569](https://twitter.com/cerbosdev/status/1610199482859245569 "") Cerbos is completely #stateless & works with #cloudservices & multiple languages. You can run it straight on a VM with a binary, in a #Kubernetes cluster. You can even run it in ECS. It can run wherever you can execute containers in a server state. #TechTwitter #authorization Twitter GitHub 01/09/2023, 4:27 AM [Release - v0.24.0](https://github.com/cerbos/cerbos/releases/tag/v0.24.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.24.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.24.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.24.0.html "") **Changelog** **Features** • [47a635e](https://github.com/cerbos/cerbos/commit/47a635e1337d7aa649cf6dba39fba82c44a96d49 "") feat!: Include metadata in decision logs ( [#1385](https://github.com/cerbos/cerbos/pull/1385 "")) • [2159cc9](https://github.com/cerbos/cerbos/commit/2159cc961db99f49e20085e0e48507be5acf6f8a "") feat: Support for filtering decision logs ( [#1387](https://github.com/cerbos/cerbos/pull/1387 "")) **Enhancements** • [13e27ab](https://github.com/cerbos/cerbos/commit/13e27abe9b5d885bf1356cb4a68e3a024cdcaf56 "") enhancement(helm): Annotations for deployment and service ( [#1363](https://github.com/cerbos/cerbos/pull/1363 "")) • [6d9fb62](https://github.com/cerbos/cerbos/commit/6d9fb62ffb3132768e14510fa860765993aad80b "") enhancement(helm): Optional cert-manager integration ( [#1365](https://github.com/cerbos/cerbos/pull/1365 "")) • [8b37e58](https://github.com/cerbos/cerbos/commit/8b37e5838c8643bfcd74c30249c0292cf6572a58 "") enhancement: Add wrapper function for ``` sqlx.Connect ``` call, incorporating basic retries ( [#1405](https://github.com/cerbos/cerbos/pull/1405 "")) **Bug fixes** • [c3ae703](https://github.com/cerbos/cerbos/commit/c3ae70394575ea4a94cc684bd1e0dde8d3db5262 "") fix(planner): R.id unresolved ( [#1371](https://github.com/cerbos/cerbos/pull/1371 "")) • [065b147](https://github.com/cerbos/cerbos/commit/065b1474299b81adcbf1315d408681de1d3ea9d5 "") fix: Fix handling of the SIGUSR1 on Windows ( [#1401](https://github.com/cerbos/cerbos/pull/1401 "")) • [32bc32d](https://github.com/cerbos/cerbos/commit/32bc32d93cf6a70632066d7ad7a378d59038461b "") fix: Flaky query plan test ( [#1364](https://github.com/cerbos/cerbos/pull/1364 "")) • [6601401](https://github.com/cerbos/cerbos/commit/6601401a5290edc3418c041d92500a27e719b91f "") fix: Handle principal-policy-only cases ( [#1406](https://github.com/cerbos/cerbos/pull/1406 "")) • [b344001](https://github.com/cerbos/cerbos/commit/b3440015ffab654a0854a281329d2e967d998e05 "") fix: Reject duplicate tests ( [#1412](https://github.com/cerbos/cerbos/pull/1412 "")) **Documentation** • [ac2e665](https://github.com/cerbos/cerbos/commit/ac2e6654bd743db8f525f8ad40e2da3e76e458f7 "") docs: Add excludeMetadataKeys and includeMetadataKeys to audit page on docs ( [#1383](https://github.com/cerbos/cerbos/pull/1383 "")) • [28a6142](https://github.com/cerbos/cerbos/commit/28a6142e9c642bea11cf5d417e5d713ab854b464 "") docs: Add policy best practices section ( [#1361](https://github.com/cerbos/cerbos/pull/1361 "")) • [6988a23](https://github.com/cerbos/cerbos/commit/6988a238635e35851e3cb3535039d03e73b0bfda "") docs: List available SDKs ( [#1366](https://github.com/cerbos/cerbos/pull/1366 "")) • [2619857](https://github.com/cerbos/cerbos/commit/2619857c67f50e6980732540f075bc00f001d3aa "") docs: Port SQLAlchemy integration guide from blog to docs ( [#1378](https://github.com/cerbos/cerbos/pull/1378 "")) • [a7fb799](https://github.com/cerbos/cerbos/commit/a7fb799076af1e79793eac36acf26234369d7af9 "") docs: Remove unstable warning from Linux packages ( [#1368](https://github.com/cerbos/cerbos/pull/1368 "")) • [3739fe9](https://github.com/cerbos/cerbos/commit/3739fe92244026f494a6835cd79a7f4773a70a53 "") docs: Update Prisma recipe to bring in line with demo repo ( [#1386](https://github.com/cerbos/cerbos/pull/1386 "")) **Chores** • [5be75a8](https://github.com/cerbos/cerbos/commit/5be75a8006e37bc70cb462278c32bd290752be86 "") chore(ci): Add CodeQL analyzer ( [#1396](https://github.com/cerbos/cerbos/pull/1396 "")) • [97707f9](https://github.com/cerbos/cerbos/commit/97707f97c1a594966e1cb3bd25c9ab69ad5b6cca "") chore(ci): Disable Renovate go.mod Go version update ( [#1359](https://github.com/cerbos/cerbos/pull/1359 "")) • [8547126](https://github.com/cerbos/cerbos/commit/8547126a549a26452fc1d72114df801cec6ab2e4 "") chore(ci): Use token with Buf setup action ( [#1413](https://github.com/cerbos/cerbos/pull/1413 "")) • [176eb49](https://github.com/cerbos/cerbos/commit/176eb49330fe73b333c92f600af37ae82118fe32 "") chore(deps): Update bufbuild/buf-push-action action to v1.1.0 ( [#1393](https://github.com/cerbos/cerbos/pull/1393 "")) • [0729e96](https://github.com/cerbos/cerbos/commit/0729e965111357c2895bd462f4ecc67853889b23 "") chore(deps): Update bufbuild/buf-setup-action action to v1.11.0 ( [#1409](https://github.com/cerbos/cerbos/pull/1409 "")) • [5d8d4c4](https://github.com/cerbos/cerbos/commit/5d8d4c4e6bcea82e291dc35e0340c3a8a8669a6b "") chore(deps): Update github actions deps ( [#1399](https://github.com/cerbos/cerbos/pull/1399 "")) • [3bcacd5](https://github.com/cerbos/cerbos/commit/3bcacd5146b641a93cbbede61cfbb42c563f1289 "") chore(deps): Update go deps ( [#1356](https://github.com/cerbos/cerbos/pull/1356 "")) • [7f52f1b](https://github.com/cerbos/cerbos/commit/7f52f1b1d8868604fb57490326b77977245a9b73 "") chore(deps): Update go deps ( [#1367](https://github.com/cerbos/cerbos/pull/1367 "")) • [7e32c7c](https://github.com/cerbos/cerbos/commit/7e32c7c6182e918bf910a551030799714b7b84af "") chore(deps): Update go deps ( [#1382](https://github.com/cerbos/cerbos/pull/1382 "")) • [60e5a50](https://github.com/cerbos/cerbos/commit/60e5a5067425ff82e3fb93060e8a8943d1811eb3 "") chore(deps): Update go deps ( [#1392](https://github.com/cerbos/cerbos/pull/1392 "")) • [b2d2069](https://github.com/cerbos/cerbos/commit/b2d206990c18e06d9eb22011a9643b9b3c3e1421 "") chore(deps): Update go deps ( [#1398](https://github.com/cerbos/cerbos/pull/1398 "")) • [5d68a19](https://github.com/cerbos/cerbos/commit/5d68a19ba93248d851ec4a882f8eae539718e517 "") chore(deps): Update go deps ( [#1404](https://github.com/cerbos/cerbos/pull/1404 "")) • [1c54170](https://github.com/cerbos/cerbos/commit/1c54170b5be726e40a465870b388d2550448f014 "") chore(deps): Update go deps ( [#1408](https://github.com/cerbos/cerbos/pull/1408 "")) • [c4cbcc1](https://github.com/cerbos/cerbos/commit/c4cbcc1e2c2cd04b5bdb15c00ea06aac2fff7a74 "") chore(deps): Update google-github-actions/setup-gcloud action to v1 ( [#1357](https://github.com/cerbos/cerbos/pull/1357 "")) • [2fc6774](https://github.com/cerbos/cerbos/commit/2fc6774a1291b30567808ee4b350034f1dd38d9c "") chore(deps): Update module [helm.sh/helm/v3](http://helm.sh/helm/v3 "") to v3.10.3 \[security\] ( [#1395](https://github.com/cerbos/cerbos/pull/1395 "")) • [89266e2](https://github.com/cerbos/cerbos/commit/89266e2e4cb14f629b0fd13eb49b0c29777fc323 "") chore(release): Add 0.23.1 release notes ( [#1375](https://github.com/cerbos/cerbos/pull/1375 "")) • [5571c97](https://github.com/cerbos/cerbos/commit/5571c9773c0c87f4dd4f77b327b6c265531feaed "") chore(release): Add 0.24.0 release notes ( [#1415](https://github.com/cerbos/cerbos/pull/1415 "")) • [6368d3b](https://github.com/cerbos/cerbos/commit/6368d3b5e801c915a9ffdb2b801760c15883500d "") chore(release): Prepare release 0.24.0 • [8d6aea6](https://github.com/cerbos/cerbos/commit/8d6aea6d76f9daa56d6a81f9ca0b5e1dac2f248b "") chore(test): Exercise audit log filtering in E2E tests ( [#1388](https://github.com/cerbos/cerbos/pull/1388 "")) • [6de575d](https://github.com/cerbos/cerbos/commit/6de575d1dcb44e9163b11248635fd3d3360c553b "") chore(version): Bump version to 0.24.0 • [c8b4afa](https://github.com/cerbos/cerbos/commit/c8b4afa30a4e2d5e39d5f2f88d94c0487bd8d5c8 "") chore: Update copyright notice ( [#1407](https://github.com/cerbos/cerbos/pull/1407 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") twitter 01/13/2023, 11:07 AM [https://twitter.com/cerbosdev/status/1613930654101835778](https://twitter.com/cerbosdev/status/1613930654101835778 "") If you're a developer or tech enthusiast looking to centralize & improve your application's authorization layer and logic, and gain a deeper understanding of access controls and abstraction of permissions - check out this link! [https://t.co/7KOmSvfRxI](https://t.co/7KOmSvfRxI "") @alexolivier #accesscontrol Twitter twitter 01/23/2023, 6:17 AM [https://twitter.com/cerbosdev/status/1617481616825241602](https://twitter.com/cerbosdev/status/1617481616825241602 "") We think that stateful authorization is an anti-pattern... Read our latest blogpost by [@alexolivier](https://twitter.com/alexolivier "") to see a comparison of stateless & stateful authZ. Then, let us know: do you agree with us? 🧐 [https://t.co/B0j9sICk9s](https://t.co/B0j9sICk9s "") #authorization #stateful #stateless @CloudNativeFdn Twitter twitter 01/31/2023, 5:00 AM [https://twitter.com/cerbosdev/status/1620361245697138689](https://twitter.com/cerbosdev/status/1620361245697138689 "") Have you registered for #CloudNativeSecurityCon? You can here: [https://hubs.ly/Q01zf-Nz0](https://hubs.ly/Q01zf-Nz0 "") We’ll also be there! Come and chat with us on February 1-2 at booth S5! We look forward to seeing you there! #CloudNative #Security #opensource [https://t.co/GHMksdL03U](https://t.co/GHMksdL03U "") Twitter twitter 01/31/2023, 11:00 AM [https://twitter.com/cerbosdev/status/1620451845452840963](https://twitter.com/cerbosdev/status/1620451845452840963 "") #CloudNativeSecurityCon starts tomorrow! There is still time to register, don’t miss out on this conference! We're excited to be there and hope that you come and see us at booth S5 on February 1-2! [https://t.co/jTuw1FyKRU](https://t.co/jTuw1FyKRU "") #CNSCon #Security #opensource Twitter twitter 02/01/2023, 5:00 AM [https://twitter.com/cerbosdev/status/1620723636666499074](https://twitter.com/cerbosdev/status/1620723636666499074 "") #CloudNativeSecurityCon starts today! We are excited to be here! Stop by booth S5 on February 1-2 to say hi! #CNSCon #Security #opensource [https://t.co/moB1x3gymU](https://t.co/moB1x3gymU "") Twitter twitter 02/01/2023, 12:14 PM [https://twitter.com/cerbosdev/status/1620833054989365250](https://twitter.com/cerbosdev/status/1620833054989365250 "") 👋 Stop by booth S5 at #CloudNativeSecurityCon to chat with [@emre](https://twitter.com/emre "") and [@alexolivier](https://twitter.com/alexolivier "") & see what Cerbos can offer for your authorization needs. We're here to help you make your authorization system more scalable and secure! 📈 #authorization #opensource [https://t.co/oZZoqyCirF](https://t.co/oZZoqyCirF "") Twitter 1199x1200px image twitter 02/02/2023, 4:26 AM [https://twitter.com/cerbosdev/status/1621077570543579136](https://twitter.com/cerbosdev/status/1621077570543579136 "") 🚀Celebrating Our Milestone: 1000 Stars on GitHub! Thanks to our amazing users who trust us to make their authorization systems more scalable and secure! We're honored to be a part of your journey. Here's to many more milestones together! #opensource #authorization #1000stars [https://t.co/5p2ioy3DTD](https://t.co/5p2ioy3DTD "") Twitter twitter 02/03/2023, 6:39 AM [https://twitter.com/cerbosdev/status/1621473379881553923](https://twitter.com/cerbosdev/status/1621473379881553923 "") We had an amazing time at the #CloudNativeSecurityCon conference in Seattle. [@emre](https://twitter.com/emre "") and [@alexolivier](https://twitter.com/alexolivier "") met so many interesting people and had some great conversations! [https://t.co/1jVqIFu78K](https://t.co/1jVqIFu78K "") Twitter twitter 02/06/2023, 5:00 AM [https://twitter.com/cerbosdev/status/1622535572240613378](https://twitter.com/cerbosdev/status/1622535572240613378 "") Are you attending Civo Navigate February 7-8? [@alexolivier](https://twitter.com/alexolivier "") will be there giving a talk of “Solving the ending requirements of authorization” on February 8th! Check out the full list of speakers and schedule here! [https://t.co/ADdRUmTigs](https://t.co/ADdRUmTigs "") Hope to see you there! #CivoNavigate Twitter twitter 02/06/2023, 7:17 AM [https://twitter.com/cerbosdev/status/1622570229619388417](https://twitter.com/cerbosdev/status/1622570229619388417 "") 🎙️ [@alexolivier](https://twitter.com/alexolivier "") joined [@tjvantoll](https://twitter.com/tjvantoll "") on the [@reactroundup](https://twitter.com/reactroundup "") podcast to talk all things authorization! Learn how authorization can help your business scale and meet regulatory req's & discover the process of testing and setting up Cerbos: [https://t.co/LnJ4cY6KGx](https://t.co/LnJ4cY6KGx "") #authorization Twitter twitter 02/06/2023, 10:00 AM [https://twitter.com/cerbosdev/status/1622611072069910528](https://twitter.com/cerbosdev/status/1622611072069910528 "") Civo Navigate is happening tomorrow! [@alexolivier](https://twitter.com/alexolivier "") will be there giving a talk of “Solving the ending requirements of authorization” on February 8th! Check out the full list of speakers and schedule here! [https://t.co/1wsuGIcZzC](https://t.co/1wsuGIcZzC "") Hope to see you there! #CivoNavigate Twitter twitter 02/07/2023, 5:18 AM [https://twitter.com/cerbosdev/status/1622902589464485888](https://twitter.com/cerbosdev/status/1622902589464485888 "") 🙌 Discover the power of self-service custom roles! We previously released a blog post exploring the topic of mapping business requirements to authorization policies. Now, we dive into the implementation of self-service custom roles: [https://t.co/ur1fvzlaVJ](https://t.co/ur1fvzlaVJ "") #authorization Twitter twitter 02/07/2023, 11:00 AM [https://twitter.com/cerbosdev/status/1622988600555061248](https://twitter.com/cerbosdev/status/1622988600555061248 "") How Cerbos helped Nook build secure & extensible roles and permissions Check out Nook's success story, now available on our site, to see why Nook selected Cerbos as an #authorization solution & the remarkable results that came out of the collaboration. [https://t.co/riQmzcZIQh](https://t.co/riQmzcZIQh "") [https://t.co/81c2pXldos](https://t.co/81c2pXldos "") Twitter twitter 02/08/2023, 9:00 AM [https://twitter.com/cerbosdev/status/1623320751771201539](https://twitter.com/cerbosdev/status/1623320751771201539 "") Civo Navigate has been great so far! We hope that you can join [@alexolivier](https://twitter.com/alexolivier "") today at 3pm, as he will be giving a talk on the topic of “Solving the ending requirements of authorization”! See you there! #CivoNavigate #authorization Twitter twitter 02/08/2023, 10:41 AM [https://twitter.com/cerbosdev/status/1623346197334265863](https://twitter.com/cerbosdev/status/1623346197334265863 "") 🚨 Learn about #authorization from [@alexolivier](https://twitter.com/alexolivier "") at the #CivoNavigate Rooftop today at 3pm EST Alex's talk will cover: ✅ Implementing permissions ✅ Stages in the evolution of a company where authorization needs to change ✅ Gitops-based example of scaling policy @CivoCloud [https://t.co/wqrg6EULhu](https://t.co/wqrg6EULhu "") Twitter twitter 02/10/2023, 5:26 AM [https://twitter.com/cerbosdev/status/1623991733238304771](https://twitter.com/cerbosdev/status/1623991733238304771 "") Cerbos have been named one of Europe’s top 100 early stage B2B SaaS/Cloud companies in The [@NotionCapital](https://twitter.com/NotionCapital "") Cloud Challengers Report! 🚀 [https://t.co/5Wo6RfKYpO](https://t.co/5Wo6RfKYpO "") We are honored to be part of this list! Big thanks to our users and amazing team! #NotionCapitalCloudChallengersReport Twitter GitHub 02/13/2023, 4:35 AM [Release - v0.25.0](https://github.com/cerbos/cerbos/releases/tag/v0.25.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.25.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.25.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.25.0.html "") **Changelog** **Features** • [31a474b](https://github.com/cerbos/cerbos/commit/31a474bcab269d41078d83b0204a21e26a9a5b9d "") feat: Add Cerbos version to response headers ( [#1448](https://github.com/cerbos/cerbos/pull/1448 "")) • [840a417](https://github.com/cerbos/cerbos/commit/840a41720168c1f04c6e58e71fc82db48e6c976a "") feat: Admin API endpoint to disable policy(s) ( [#1426](https://github.com/cerbos/cerbos/pull/1426 "")) **Enhancements** • [dfb42e9](https://github.com/cerbos/cerbos/commit/dfb42e9ce71feb39a3d50c1ee690dfa956699323 "") enhancement!: Return number of schemas deleted, and don't error if none ( [#1445](https://github.com/cerbos/cerbos/pull/1445 "")) • [49ccfb3](https://github.com/cerbos/cerbos/commit/49ccfb39cd2be3fd8a181b93261642630d0f3a68 "") enhancement: Add DeleteSchema RPC to the SDK AdminClient ( [#1459](https://github.com/cerbos/cerbos/pull/1459 "")) • [6b6ea4c](https://github.com/cerbos/cerbos/commit/6b6ea4c6317eae29adf6030169c1151f1a6c06de "") enhancement: Prevent scoped policies being disabled ( [#1441](https://github.com/cerbos/cerbos/pull/1441 "")) **Bug fixes** • [4630a08](https://github.com/cerbos/cerbos/commit/4630a08120a91000411a7ee090a63267cdc27a4b "") fix: Evict disabled policy from the cache ( [#1436](https://github.com/cerbos/cerbos/pull/1436 "")) • [5fc9861](https://github.com/cerbos/cerbos/commit/5fc98615202dcb21c17bae34e079725854b84bc2 "") fix: Evict policies that are changed in-place ( [#1439](https://github.com/cerbos/cerbos/pull/1439 "")) • [b40303f](https://github.com/cerbos/cerbos/commit/b40303fdf78c21c0c51f80ca11354cb7d2704c05 "") fix: Fix erroneous check in the Disable command ( [#1447](https://github.com/cerbos/cerbos/pull/1447 "")) • [986d3d0](https://github.com/cerbos/cerbos/commit/986d3d08504733d9ae3910579a438f36efd1e4b1 "") fix: Fix typo in policy metadata field ( [#1454](https://github.com/cerbos/cerbos/pull/1454 "")) • [49c9405](https://github.com/cerbos/cerbos/commit/49c94059c6b7792bc38d6bacdb5c8c8b6dc5756c "") fix: Fix typo in policy metadata field ( [#1458](https://github.com/cerbos/cerbos/pull/1458 "")) **Documentation** • [4297ad5](https://github.com/cerbos/cerbos/commit/4297ad5aff01c05a45cd9d7ef3bfb0c334565404 "") docs: Add note on resource-led policy design in ``` Best practices ``` section ( [#1423](https://github.com/cerbos/cerbos/pull/1423 "")) • [eb8bf6d](https://github.com/cerbos/cerbos/commit/eb8bf6d34738420a1aebc32769f63703bed1b61f "") docs: Add policyVersion example to tests ( [#1430](https://github.com/cerbos/cerbos/pull/1430 "")) • [20b0052](https://github.com/cerbos/cerbos/commit/20b0052243ed4860d9995b0377cbd2910b0d3297 "") docs: Clarify how to provide blob store credentials ( [#1433](https://github.com/cerbos/cerbos/pull/1433 "")) **Chores** • [a7a542c](https://github.com/cerbos/cerbos/commit/a7a542cd777965cadb0da1ed57dba903a8c14c3a "") chore(ci): Improve caching ( [#1446](https://github.com/cerbos/cerbos/pull/1446 "")) • [c2628e2](https://github.com/cerbos/cerbos/commit/c2628e2c2379053f5cabcd50529ce7639e94016d "") chore(ci): Update gcloud auth ( [#1420](https://github.com/cerbos/cerbos/pull/1420 "")) • [f7ecc84](https://github.com/cerbos/cerbos/commit/f7ecc845ed1eaeac9ae7f9f509469fa480bc8aee "") chore(ci): Use Go 1.20 in CI ( [#1440](https://github.com/cerbos/cerbos/pull/1440 "")) • [e458fd2](https://github.com/cerbos/cerbos/commit/e458fd272436c254dcc8f6569f761c8c16ef0d9f "") chore(deps): Bump [helm.sh/helm/v3](http://helm.sh/helm/v3 "") from 3.11.0 to 3.11.1 ( [#1450](https://github.com/cerbos/cerbos/pull/1450 "")) • [e6450bd](https://github.com/cerbos/cerbos/commit/e6450bdad2d6093b6a5c2a0c459f370a7a941644 "") chore(deps): Revert update of [github.com/jackc/pgx/v4](http://github.com/jackc/pgx/v4 "") to v5 ( [#1425](https://github.com/cerbos/cerbos/pull/1425 "")) ( [#1427](https://github.com/cerbos/cerbos/pull/1427 "")) • [c7bf926](https://github.com/cerbos/cerbos/commit/c7bf9264fbabaefe05cd738c0e0ec4c1c8677778 "") chore(deps): Update bufbuild/buf-setup-action action to v1.12.0 ( [#1422](https://github.com/cerbos/cerbos/pull/1422 "")) • [860d4c0](https://github.com/cerbos/cerbos/commit/860d4c06081579676d3f0f56c3f1a9f9b2b2272f "") chore(deps): Update github actions deps ( [#1429](https://github.com/cerbos/cerbos/pull/1429 "")) • [9003411](https://github.com/cerbos/cerbos/commit/90034111ed264c54edb4328fd29c547416a1b6d9 "") chore(deps): Update go deps ( [#1416](https://github.com/cerbos/cerbos/pull/1416 "")) • [d20bb6e](https://github.com/cerbos/cerbos/commit/d20bb6e785fc28e5d04aff8d04b5fd1942a2a9ba "") chore(deps): Update go deps ( [#1421](https://github.com/cerbos/cerbos/pull/1421 "")) • [60b07ae](https://github.com/cerbos/cerbos/commit/60b07aea3f2688c6ce8a281820892f411ea02955 "") chore(deps): Update go deps ( [#1424](https://github.com/cerbos/cerbos/pull/1424 "")) • [5dad5ce](https://github.com/cerbos/cerbos/commit/5dad5ce4bc209489f0c75b34b5b3268941976633 "") chore(deps): Update go deps ( [#1428](https://github.com/cerbos/cerbos/pull/1428 "")) • [e02ad24](https://github.com/cerbos/cerbos/commit/e02ad244c7c2d045fc3c9bcdbfd3bd5c16039d4e "") chore(deps): Update go deps ( [#1437](https://github.com/cerbos/cerbos/pull/1437 "")) • [142c44c](https://github.com/cerbos/cerbos/commit/142c44c42b69e20a5f2ef9628778d50eeb13b24a "") chore(deps): Update go deps to v2 (major) ( [#1417](https://github.com/cerbos/cerbos/pull/1417 "")) • [09d538f](https://github.com/cerbos/cerbos/commit/09d538f298f15da639bb7c617a905574cb8032b3 "") chore(deps): Update google-github-actions/setup-gcloud action to v1.1.0 ( [#1438](https://github.com/cerbos/cerbos/pull/1438 "")) • [349afb1](https://github.com/cerbos/cerbos/commit/349afb1df7b2fb9ba2d0d06575844a61f4cf55d5 "") chore(deps): Update module [github.com/jackc/pgx/v4](http://github.com/jackc/pgx/v4 "") to v5 ( [#1425](https://github.com/cerbos/cerbos/pull/1425 "")) • [7e10fc6](https://github.com/cerbos/cerbos/commit/7e10fc60a48e9525a5640c446cb453bb6d5ed813 "") chore(deps): Update module [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](http://go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp "") to v0.39.0 \[security\] ( [#1452](https://github.com/cerbos/cerbos/pull/1452 "")) • [4555737](https://github.com/cerbos/cerbos/commit/45557372ead3e9c203781a78f327b433e48497cc "") chore(release): Add 0.25.0 release notes ( [#1460](https://github.com/cerbos/cerbos/pull/1460 "")) • [6b5a051](https://github.com/cerbos/cerbos/commit/6b5a051a160398a3c04370f742e6090fab2ed0b8 "") chore(release): Prepare release 0.25.0 • [bee90fc](https://github.com/cerbos/cerbos/commit/bee90fc1f45e0606315cfac18dfd51b6f5c1e047 "") chore(version): Bump version to 0.25.0 • [2059326](https://github.com/cerbos/cerbos/commit/20593267c76e30da4311fb36b711718b203eaf74 "") chore: Add licence file for pjbgf/sha1cd ( [#1418](https://github.com/cerbos/cerbos/pull/1418 "")) • [3c888cc](https://github.com/cerbos/cerbos/commit/3c888ccdbd8d69483d21bb57a216af5f029956b6 "") chore: Upgrade Otel semconv version ( [#1444](https://github.com/cerbos/cerbos/pull/1444 "")) **Others** • [fa28609](https://github.com/cerbos/cerbos/commit/fa28609d2ea305258cbca5a30ec106978cb9ba67 "") revert: Fix typo in policy metadata field ( [#1454](https://github.com/cerbos/cerbos/pull/1454 "")) ( [#1456](https://github.com/cerbos/cerbos/pull/1456 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") twitter 02/13/2023, 6:33 AM [https://twitter.com/cerbosdev/status/1625095841315782656](https://twitter.com/cerbosdev/status/1625095841315782656 "") Follow along over the next few days as we compare user permissions strategies, to help you figure out which strategy may work best for your organization’s services! ⬇️ 💡 #cerbos #permissions #SaaS #authorization #microservice [https://t.co/v1nYbiQp3C](https://t.co/v1nYbiQp3C "") Twitter twitter 02/16/2023, 12:09 PM [https://twitter.com/cerbosdev/status/1626267622831431681](https://twitter.com/cerbosdev/status/1626267622831431681 "") 📣 Check out the latest updates from Cerbos in our monthly newsletter! [https://cerbos.dev/subscribe#Past%20Issues](/content/subscribe#Past%20Issues ""/index.html) This month, we talk about: ✅ v0.25 of Cerbos ✅ upcoming launch of Cerbos Cloud ✅ recent milestones ✅ podcasts the Cerbos team was on ✅ and more #cerbosnewsletter #authorization [https://t.co/Cl9TnVsMCh](https://t.co/Cl9TnVsMCh "") Twitter twitter 02/17/2023, 6:05 AM [https://twitter.com/cerbosdev/status/1626538377964126209](https://twitter.com/cerbosdev/status/1626538377964126209 "") 🥳 Happy user raising seed round! Congratulations, [@CommandKDev](https://twitter.com/CommandKDev "") ! Twitter Lightspeed backs CommandK's mission to become the go-to enterprise security command center [https://tcrn.ch/3lHuZ7G](https://tcrn.ch/3lHuZ7G "") by [@JagmeetS13](https://twitter.com/JagmeetS13 "") Twitter twitter 02/20/2023, 7:00 AM [https://twitter.com/cerbosdev/status/1627639202077630465](https://twitter.com/cerbosdev/status/1627639202077630465 "") Our own [@alexolivier](https://twitter.com/alexolivier "") was on the [@reactroundup](https://twitter.com/reactroundup "") podcast talking about Cerbos and what it can offer users! He also takes time to go over testing and setting Cerbos up. Check it out here: [https://t.co/vV6w0koADM](https://t.co/vV6w0koADM "") #podcast #authorization #Cerbos Twitter twitter 02/20/2023, 7:05 AM [https://twitter.com/cerbosdev/status/1627640572956577793](https://twitter.com/cerbosdev/status/1627640572956577793 "") Tips on how to run your software startup more effectively, from Charith Ellawala, Co-Founder & CTO at Cerbos ➡️ [https://t.co/20XrXCkHtX](https://t.co/20XrXCkHtX "") #cerbos #startup #startupfounder #startupstrategies #software #authorization Twitter twitter 02/22/2023, 5:42 AM [https://twitter.com/cerbosdev/status/1628344359052607488](https://twitter.com/cerbosdev/status/1628344359052607488 "") 👉 Check out our playground to write, test, and debug Cerbos policies in your browser [https://cerbos.dev/playground](/content/playground ""/index.html) And if you're not sure where to start - try some of the provided pre-built examples! #cerbos #authorization #policies Twitter twitter 02/24/2023, 6:39 AM [https://twitter.com/cerbosdev/status/1629083468024975360](https://twitter.com/cerbosdev/status/1629083468024975360 "") 🔒Worried about the security your cloud-native apps? Watch the [@CloudNativeFdn](https://twitter.com/CloudNativeFdn "") webinar on cloud-native app authZ with @alexolivier, Product Lead at Cerbos. [https://t.co/Zq85XuuhMC](https://t.co/Zq85XuuhMC "") ➡️Fine-grained access controls ➡️Observability w/ #OpenTelemetry #Prometheus ➡️Git-ops with #Argo Twitter twitter 02/24/2023, 9:18 AM [https://twitter.com/cerbosdev/status/1629123484692381696](https://twitter.com/cerbosdev/status/1629123484692381696 "") 🚀 Learn how to create dynamic and secure web experiences with [@nextjs](https://twitter.com/nextjs ""), [@prisma](https://twitter.com/prisma ""), and Cerbos! Check out the demo code and read the full text here: [https://t.co/MLXf39M8wJ](https://t.co/MLXf39M8wJ "") #Nextjs #Prisma #Cerbos #authorization #integration #webdev Twitter twitter 02/28/2023, 7:00 AM [https://twitter.com/cerbosdev/status/1630538304427835392](https://twitter.com/cerbosdev/status/1630538304427835392 "") Did you know you can supercharge your policy rules with self-service custom roles using Cerbos? We've got you covered in this blog written by Sam Lock: [https://t.co/Ig7Gp1I3vc](https://t.co/Ig7Gp1I3vc "") #customroles #authorization #Cerbos Twitter twitter 03/03/2023, 7:00 AM [https://twitter.com/cerbosdev/status/1631625469593255936](https://twitter.com/cerbosdev/status/1631625469593255936 "") It's always great when you can free the development team to focus on the business logic. Cerbos allows you to implement an authorization mechanism as a global shared provider. Read more about how to do that here: [https://t.co/iSveGIWEWs](https://t.co/iSveGIWEWs "") #authorization #Cerbos Twitter twitter 03/03/2023, 8:55 AM [https://twitter.com/cerbosdev/status/1631654474824515587](https://twitter.com/cerbosdev/status/1631654474824515587 "") Choosing the right architectural style is critical when building an IT infrastructure 🤔 #REST or #gRPC? REST: ✅simple ❌can lack consistency gRPC: ✅powerful ❌complex Which one to choose? Find out here: [https://t.co/CvBnNG43xF](https://t.co/CvBnNG43xF "") #cerbos #authorization @TechBullion Twitter twitter 03/06/2023, 10:50 AM [https://twitter.com/cerbosdev/status/1632770529948999681](https://twitter.com/cerbosdev/status/1632770529948999681 "") Let's discuss service-to-service authorization & how to do it right ✅ Let’s start with non-user principals. They are identities that you tie to objects: servers and microservices. Why would you want to do that? #cerbos #authorization #SaaS #enterprise #scale [https://t.co/7ENWz57lPZ](https://t.co/7ENWz57lPZ "") Twitter 🙌 1 twitter 03/07/2023, 9:24 AM [https://twitter.com/cerbosdev/status/1633111464151056386](https://twitter.com/cerbosdev/status/1633111464151056386 "") Reduce latency & ensure security with Cerbos Cerbos requires no cloud service or any external dependancies of any kind: [https://t.co/i29RFIT68K](https://t.co/i29RFIT68K "") #cerbos #authorization [https://t.co/5DttOQRlDj](https://t.co/5DttOQRlDj "") Twitter twitter 03/08/2023, 6:12 AM [https://twitter.com/cerbosdev/status/1633425434405642243](https://twitter.com/cerbosdev/status/1633425434405642243 "") Happy 2nd birthday Cerbos! 🎉🎂 2 years ago, we launched with the mission to make authZ simpler to implement and manage & free up product teams to focus on building their core product. Thank you to our amazing community for helping us grow and improve! #Cerbos Twitter twitter 03/09/2023, 12:02 PM [https://twitter.com/cerbosdev/status/1633876020519653376](https://twitter.com/cerbosdev/status/1633876020519653376 "") 📣 Check out the latest updates from Cerbos in our monthly newsletter! [https://cerbos.dev/subscribe#Past%20Issues](/content/subscribe#Past%20Issues ""/index.html) ✅ Cerbos anniversary ✅ upcoming launch of Cerbos Cloud ✅ @nextjs + @prisma integration ✅ @remix\_run integration ✅ webinars the Cerbos team was on ✅ and more #cerbosnewsletter [https://t.co/K0jeR0CeGH](https://t.co/K0jeR0CeGH "") Twitter twitter 03/10/2023, 8:04 AM [https://twitter.com/cerbosdev/status/1634178375940964355](https://twitter.com/cerbosdev/status/1634178375940964355 "") Struggling with the complexity of modern software? ⭐Decoupling components can be the solution you need Learn how it can help with performance, cost optimization & feature development. Details here: [https://t.co/oy6Jgg1WBE](https://t.co/oy6Jgg1WBE "") #softwaredevelopment #decoupling #authorization #Cerbos Twitter GitHub 04/17/2023, 3:48 AM [Release - v0.26.0](https://github.com/cerbos/cerbos/releases/tag/v0.26.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.26.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.26.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.26.0.html "") **Changelog** **Features** • [a38efe6](https://github.com/cerbos/cerbos/commit/a38efe6d783b9a5ad8537df8b5e73fd447b28a8e "") feat: Add JUnit output format for test results ( [#1508](https://github.com/cerbos/cerbos/pull/1508 "")) • [52f0daf](https://github.com/cerbos/cerbos/commit/52f0daf260f8e1887ec62d4c25a061f0a8a286ba "") feat: Cerbos Cloud bundle store driver ( [#1530](https://github.com/cerbos/cerbos/pull/1530 "")) • [4a440e9](https://github.com/cerbos/cerbos/commit/4a440e925ec99c247cdb3a854932e14f44652994 "") feat: Kafka audit log ( [#1499](https://github.com/cerbos/cerbos/pull/1499 "")) **Enhancements** • [06c514d](https://github.com/cerbos/cerbos/commit/06c514da1aa61c605d274f58e1d2034b625aa6b6 "") enhancement!: Group test results by test name ( [#1498](https://github.com/cerbos/cerbos/pull/1498 "")) • [1a949a1](https://github.com/cerbos/cerbos/commit/1a949a1309af993a1236c28e1dc325a29387286a "") enhancement!: Make config flag optional ( [#1462](https://github.com/cerbos/cerbos/pull/1462 "")) • [138a1cd](https://github.com/cerbos/cerbos/commit/138a1cd9976a3955ff01a0d7326e957e0d07744a "") enhancement: Add includeDisabled to Admin API and schema deletion to cerbosctl ( [#1463](https://github.com/cerbos/cerbos/pull/1463 "")) • [a5c1dc3](https://github.com/cerbos/cerbos/commit/a5c1dc342dc9829ee1021170d40d33f36c5cfb06 "") enhancement: Add principal, resource and action as properties of JUnit output ( [#1520](https://github.com/cerbos/cerbos/pull/1520 "")) • [f38a10e](https://github.com/cerbos/cerbos/commit/f38a10eae4e0d0d4035044731de1036e50b7195f "") enhancement: Add support for reading archive files for the disk driver ( [#1473](https://github.com/cerbos/cerbos/pull/1473 "")) • [a5c6b10](https://github.com/cerbos/cerbos/commit/a5c6b10600dbbcabd8bfa4f5f71fa5b82a6dd265 "") enhancement: Audit error metric ( [#1513](https://github.com/cerbos/cerbos/pull/1513 "")) • [ad0dbb2](https://github.com/cerbos/cerbos/commit/ad0dbb2f778041a5b7f60634d2bd8efaa5f77dc2 "") enhancement: Enable auth on API explorer page ( [#1464](https://github.com/cerbos/cerbos/pull/1464 "")) • [22fff65](https://github.com/cerbos/cerbos/commit/22fff65aaef6c8d8839d1ed99e067c0179886136 "") enhancement: Enable disabled policies ( [#1472](https://github.com/cerbos/cerbos/pull/1472 "")) • [eb0d3da](https://github.com/cerbos/cerbos/commit/eb0d3dac71cd5bd93381fcf377669531b2a91a8c "") enhancement: Report audit close error ( [#1501](https://github.com/cerbos/cerbos/pull/1501 "")) **Bug fixes** • [b6fdc81](https://github.com/cerbos/cerbos/commit/b6fdc81fb3ab0245ff920107ea9bc4b8afe20c5f "") fix: Fix passing tests not being visible in JUnit test output ( [#1534](https://github.com/cerbos/cerbos/pull/1534 "")) • [f40a8a8](https://github.com/cerbos/cerbos/commit/f40a8a8c3b76463491afdbe1bb841750f71ef63f "") fix: Kafka async produce context cancellation ( [#1516](https://github.com/cerbos/cerbos/pull/1516 "")) • [a9e540d](https://github.com/cerbos/cerbos/commit/a9e540dfb64ac0f4e30d29204117a53a6c52fdff "") fix: Kafka async publish fails when the API request returns ( [#1510](https://github.com/cerbos/cerbos/pull/1510 "")) • [b6756b0](https://github.com/cerbos/cerbos/commit/b6756b075d9b0ce201d8323bc3ca9b56cde716cb "") fix: Prevent default config from being turned into a path ( [#1533](https://github.com/cerbos/cerbos/pull/1533 "")) **Documentation** • [4fddbfb](https://github.com/cerbos/cerbos/commit/4fddbfb805e93b01c88dcaa152c192e59f366710 "") docs: Add Kafka audit backend docs ( [#1506](https://github.com/cerbos/cerbos/pull/1506 "")) • [80e7360](https://github.com/cerbos/cerbos/commit/80e73601e7e364bf55947b7ccad9b99e7f0b40f2 "") docs: Add resource ID to test examples ( [#1488](https://github.com/cerbos/cerbos/pull/1488 "")) • [e5dbcb5](https://github.com/cerbos/cerbos/commit/e5dbcb533eaa7a10b3dc2f1a30b0a9218a9ee1d6 "") docs: Document /api/server\_info ( [#1469](https://github.com/cerbos/cerbos/pull/1469 "")) • [27a2211](https://github.com/cerbos/cerbos/commit/27a2211994409de9504faa8d4a9daac584ed442a "") docs: Document CEL string.format function ( [#1528](https://github.com/cerbos/cerbos/pull/1528 "")) • [397d626](https://github.com/cerbos/cerbos/commit/397d62648373c19d6a763bac90d41cfbb88020fe "") docs: Fix README snapshot.yml badge ( [#1497](https://github.com/cerbos/cerbos/pull/1497 "")) • [53c6a41](https://github.com/cerbos/cerbos/commit/53c6a412fa124e54a6bf5af9ccb5f3da0c3a0286 "") docs: Fix name of test output format flag ( [#1481](https://github.com/cerbos/cerbos/pull/1481 "")) • [a1a6143](https://github.com/cerbos/cerbos/commit/a1a61435fef80404cba33724bb5bee54d09c4a3e "") docs: Fix typo in 04\_testing-policies.adoc ( [#1477](https://github.com/cerbos/cerbos/pull/1477 "")) **Chores** • [5fa9390](https://github.com/cerbos/cerbos/commit/5fa93905a3861cfcb025c35f803cf32c14f5dbbf "") chore(api): Remove api/x/plan/resources endpoint ( [#1471](https://github.com/cerbos/cerbos/pull/1471 "")) • [92725a9](https://github.com/cerbos/cerbos/commit/92725a97aa6533821e7ad213b5e72b1c278b80f6 "") chore(ci): Add timeouts to workflows ( [#1505](https://github.com/cerbos/cerbos/pull/1505 "")) • [7507b68](https://github.com/cerbos/cerbos/commit/7507b683cf3880ddab455dc192632949469455b9 "") chore(ci): Increase snapshot build timeout ( [#1509](https://github.com/cerbos/cerbos/pull/1509 "")) • [52d990c](https://github.com/cerbos/cerbos/commit/52d990c8671c46c6cdbd5ba3224bfbce8e71c6d4 "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 20.10.23+incompatible to 20.10.24+incompatible ( [#1517](https://github.com/cerbos/cerbos/pull/1517 "")) • [5831556](https://github.com/cerbos/cerbos/commit/583155638574716a139bb272950d96f9f0b26179 "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 23.0.2+incompatible to 23.0.3+incompatible in /tools ( [#1518](https://github.com/cerbos/cerbos/pull/1518 "")) • [f2a2b8f](https://github.com/cerbos/cerbos/commit/f2a2b8f72c66cb6c8af5765e9dcc65ad85ce339f "") chore(deps): Bump [github.com/opencontainers/runc](http://github.com/opencontainers/runc "") from 1.1.2 to 1.1.5 ( [#1507](https://github.com/cerbos/cerbos/pull/1507 "")) • [682f41b](https://github.com/cerbos/cerbos/commit/682f41b4d95d895bb56124313cc79afa739a2e53 "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.5.0 to 0.7.0 ( [#1465](https://github.com/cerbos/cerbos/pull/1465 "")) • [bf08b73](https://github.com/cerbos/cerbos/commit/bf08b73544634b0e494fd2df09ec58daa63c1427 "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.5.0 to 0.7.0 in /tools ( [#1466](https://github.com/cerbos/cerbos/pull/1466 "")) • [dcaf942](https://github.com/cerbos/cerbos/commit/dcaf942f878f23b9346dca0537a1218b962ffe8e "") chore(deps): Update bufbuild/buf-setup-action action to v1.15.0 ( [#1484](https://github.com/cerbos/cerbos/pull/1484 "")) • [215c4ee](https://github.com/cerbos/cerbos/commit/215c4eed03db654336dc60b09ac30665b566c37c "") chore(deps): Update bufbuild/buf-setup-action action to v1.16.0 ( [#1512](https://github.com/cerbos/cerbos/pull/1512 "")) • [c11163b](https://github.com/cerbos/cerbos/commit/c11163b4943496566a32ce329499def9e13773f7 "") chore(deps): Update bufbuild/buf-setup-action action to v1.17.0 ( [#1522](https://github.com/cerbos/cerbos/pull/1522 "")) • [f19a9f3](https://github.com/cerbos/cerbos/commit/f19a9f37095d8e9002c2f6ccdca4dea62ebb1910 "") chore(deps): Update github actions deps ( [#1475](https://github.com/cerbos/cerbos/pull/1475 "")) • [19e7e0b](https://github.com/cerbos/cerbos/commit/19e7e0b41b3bf8329c7d70d04a8f158e9901a1d1 "") chore(deps): Update github actions deps ( [#1494](https://github.com/cerbos/cerbos/pull/1494 "")) • [bd60c15](https://github.com/cerbos/cerbos/commit/bd60c15b432dad29681be5b94a738744f8ca450d "") chore(deps): Update github actions deps to v4 (major) ( [#1495](https://github.com/cerbos/cerbos/pull/1495 "")) • [a72e752](https://github.com/cerbos/cerbos/commit/a72e75252cb28cd7134e3aea56cf910fc0767116 "") chore(deps): Update go deps ( [#1474](https://github.com/cerbos/cerbos/pull/1474 "")) • [bbc795d](https://github.com/cerbos/cerbos/commit/bbc795d2ed3f872e72cf0ef132f2bb07942d2824 "") chore… [cerbos/cerbos](https://github.com/cerbos/cerbos "") 🎉 1 Charith (Cerbos) 06/07/2023, 6:39 AM We just released [Cerbos 0.27.0](https://github.com/cerbos/cerbos/releases/tag/v0.27.0 "") with support for user-defined outputs from policy evaluation and a new ``` overlay ``` storage driver for fault tolerance. Checkout the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.27.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.27.0.html "") 🎉 9 d - 2 - 2 GitHub 07/18/2023, 9:50 AM This channel will receive notifications from [cerbos/cerbos](https://github.com/cerbos/cerbos "") for: ``` releases ``` a Aldin Kiselica 07/18/2023, 9:57 AM A couple of hours ago we've released [Cerbos v0.29.0](https://github.com/cerbos/cerbos/releases/tag/v0.29.0 ""). cerbie🎉 You can now define your variables in a dedicated file and import them into any of the other policies to reuse common values and expressions across your policy repo. Additionally, a new globals object is available to policies at runtime to read environment-specific values. For example, you might want to grant additional permissions to a role in your staging environment, without creating separate policy versions for different environments. There are some more interesting novelties. To see all the changes and read full release notes, check [https://docs.cerbos.dev/cerbos/latest/releases/v0.29.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.29.0.html "") 🙌 4 r - 4 - 4 z Zapier 08/22/2023, 8:32 AM RT @CivoCloud: Big thank you to @cerbosdev for being a Silver Sponsor for Navigate Europe 2023 and helping to make the event possible 💙 G… z Zapier 08/22/2023, 8:38 AM RT @ThisDotMedia: 🔐 Ever get #Authentication and #Authorization mixed up? Think of it like a concert 🎵: Authentication is your ticket in, A… z Zapier 08/29/2023, 5:13 AM Introducing #Mongoose #Adapter for #Cerbos Query Plans 🚀 Now, implementing result filtering based on policies is super easy. Simply pass the plan to the adapter & include the resulting conditions in the find method of your models🌟 🔗 [https://t.co/8hCRQYwiv1](https://t.co/8hCRQYwiv1 "") #Authorization [https://twitter.com/cerbosdev/status/1696450950641103036](https://twitter.com/cerbosdev/status/1696450950641103036 "") z Zapier 08/29/2023, 5:18 AM RT @boxyhq: We want to express a huge thank you to each of the panelists of the "Future of Authorization" - discussion at the Developer-Fir… [https://twitter.com/cerbosdev/status/1696451440355484081](https://twitter.com/cerbosdev/status/1696451440355484081 "") z Zapier 08/29/2023, 12:47 PM @emre emphasizes data security as a startup's opportunity, not just a need 👉 [https://t.co/Y8wXuuePFr](https://t.co/Y8wXuuePFr "") 🔑 Embrace "zero trust": Verify all 🔑 Understand your processes & data 🔑 Use MFA, encryption & audits #DataSecurity #ZeroTrust #Cerbos #Authorization [https://twitter.com/cerbosdev/status/1696565140085264565](https://twitter.com/cerbosdev/status/1696565140085264565 "") z Zapier 08/30/2023, 7:33 AM 🚀 #Cerbos will be at #CivoNavigateEU, Booth 7! Facing authorization challenges? Stop by, let's chat. & Grab some Cerbos merch! 👕 Don't miss Alex's talk on "Modernizing #Authorization" on 5th Sept, 1415 1440BST. Dive deep into decoupled #ABAC 🛡️ #CivoNavigate @CivoCloud [https://t.co/FaIEUQP7X2https://twitter.com/cerbosdev/status/1696847395596726408](https://t.co/FaIEUQP7X2https://twitter.com/cerbosdev/status/1696847395596726408 "") z Zapier 08/30/2023, 10:28 AM RT @CivoCloud: Security is a hot topic this year at Navigate Europe with talks from Oliver Pinson-Roxburgh, @alexolivier, @rajeshmuthusamy,… [https://twitter.com/cerbosdev/status/1696892100606841050](https://twitter.com/cerbosdev/status/1696892100606841050 "") a Aldin Kiselica 08/31/2023, 4:08 AM removed an integration from this channel: [twitter](https://cerboscommunity.slack.com/services/B02GF4XPWR0 "") n News Alerts 09/04/2023, 10:59 AM @cerbosdev: ⚠️ Access Denied! ⚠️ Keep your authZ policies fine-tuned to protect sensitive information, simplify workflows, and safeguard against malicious activity. #Cerbos #Authorization n News Alerts 09/05/2023, 7:00 AM @cerbosdev: 🚀 Day 1 of #CivoNavigateEU! Visit #Cerbos at Booth 7. Need help with #authorization? Chat with us! & Grab exclusive Cerbos merch 👕Don't miss @alexolivier's talk today on "Modernizing Authorization" 1415 1440BST @ Queen Charlotte 🛡️@CivoCloud #ABAC @cerbosdev: @alexolivier @CivoCloud @alexolivier @fzn\_sam n News Alerts 09/05/2023, 11:00 AM @cerbosdev: 🚀 THANK YOU to everyone who's visited us at Booth 👉 #7 👈 at #CivoNavigateEU so far! We're inspired by all the insightful conversations and the passion of the attendees.Keep the discussions coming; we're here and eager to connect 💬 😊 #Cerbos #Authorization @CivoCloud n News Alerts 09/06/2023, 6:04 AM @cerbosdev: 🚀 Having amazing conversations at #CivoNavigateEU! If you've yet to visit, swing by Booth 👉 #7 👈. Let's dive into authorization solutions tailored for your needs.@CivoCloud #Cerbos #Authorization @cerbosdev: Our mission❓ Streamline & empower the #authorization process, helping businesses adapt & thrive. 🔺 #Cerbos, the open-source authorization layer, addresses role & permission complexities in evolving apps, ensuring secure & adaptable management.#OpenSource #AdaptableBusiness @cerbosdev: 💡Inspired by @KelseyHightower's talk today. Valuable insights for juniors, open source's current state, & the idea of “resetting the game” with each new role (like the game Metro 😂). Eager for more talks & chats with you all!#CivoNavigateEU @CivoCloud @alexolivier @fzn\_sam n News Alerts 09/06/2023, 7:02 AM @cerbosdev: 💡Inspired by @KelseyHightower 's talk today. Valuable insights for juniors, open source's current state, & the idea of “resetting the game” with each new role (like the game Metroid 😂). Eager for more talks & chats with you all! #CivoNavigateEU@CivoCloud @alexolivier @fzn\_sam @cerbosdev: We have a spare ticket for #DevRelCon in London, Sept 7-8  🎟 that we'd like to give away to one of you, or your devrel team member 😊Please respond& let us know whether you’d be interested in the ticket. The first person who responds will get the ticket. @cerbosdev: P.S. Once we confirm the person who will be receiving the ticket, we will send you a private message asking for some additional information required for us to assign the ticket to this individual. n News Alerts 09/06/2023, 10:02 AM @cerbosdev: Why is the #Cerbos Query Plan API such a beneficial feature? Find out in our new blog post: #QueryPlan #Policies #Authorization GitHub 09/13/2023, 4:04 AM [Release - v0.30.0](https://github.com/cerbos/cerbos/releases/tag/v0.30.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.30.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.30.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.30.0.html "") **Changelog** **Features** • [304586b](https://github.com/cerbos/cerbos/commit/304586b15b951b4b416e7c219672b5b12643c17c "") feat!: Check variable references at compile time ( [#1772](https://github.com/cerbos/cerbos/pull/1772 "")) • [b9228f6](https://github.com/cerbos/cerbos/commit/b9228f64e8461fd3dc71b9b1543698f0c1731c18 "") feat(client): Add options for intercepting gRPC operations ( [#1724](https://github.com/cerbos/cerbos/pull/1724 "")) • [24cb3e4](https://github.com/cerbos/cerbos/commit/24cb3e4f9a6775e21f2ed974b6b884f340c1cd9b "") feat: Add cerbosctl command to export policies and schemas from store ( [#1686](https://github.com/cerbos/cerbos/pull/1686 "")) • [9652c90](https://github.com/cerbos/cerbos/commit/9652c909f1e07e0d55e851fec800071ac0ddae57 "") feat: Audit log rotation support ( [#1766](https://github.com/cerbos/cerbos/pull/1766 "")) **Enhancements** • [8fd1ac8](https://github.com/cerbos/cerbos/commit/8fd1ac8c3dba69d7be070b81d8a67725b5634269 "") enhancement!: Use ``` .cerbos.yaml ``` as conventional name for config file ( [#1755](https://github.com/cerbos/cerbos/pull/1755 "")) • [5dce9a9](https://github.com/cerbos/cerbos/commit/5dce9a9fd33f8b0dc52b2282fc03435f28bc47b5 "") enhancement(helm): Add ability to set clusterIP ( [#1707](https://github.com/cerbos/cerbos/pull/1707 "")) • [3fbd95e](https://github.com/cerbos/cerbos/commit/3fbd95e3a7c2daf1d2e46912f662761344556ae2 "") enhancement(helm): Allow an image digest to be provided instead of a tag ( [#1735](https://github.com/cerbos/cerbos/pull/1735 "")) • [1f6ba2c](https://github.com/cerbos/cerbos/commit/1f6ba2c0cead154b1e663da8116d5a98ce58965e "") enhancement: Better error messages from compile command ( [#1750](https://github.com/cerbos/cerbos/pull/1750 "")) • [e2c7af0](https://github.com/cerbos/cerbos/commit/e2c7af04381528779cc7e9a4fe06e09cd86eae41 "") enhancement: Clean-up store resources ( [#1749](https://github.com/cerbos/cerbos/pull/1749 "")) • [4e7d22c](https://github.com/cerbos/cerbos/commit/4e7d22c10b9e58897e2f68170d98e2af2715734c "") enhancement: Compile and run tests from an archive ( [#1721](https://github.com/cerbos/cerbos/pull/1721 "")) • [6582c70](https://github.com/cerbos/cerbos/commit/6582c701176120a500269b5770510372a6e13502 "") enhancement: Configurable time skew for JWT validation ( [#1790](https://github.com/cerbos/cerbos/pull/1790 "")) • [1130d12](https://github.com/cerbos/cerbos/commit/1130d12ff28347f8fe39cef575b9f84d14e8da7e "") enhancement: Configuration to disable API explorer ( [#1767](https://github.com/cerbos/cerbos/pull/1767 "")) • [4d5d0c5](https://github.com/cerbos/cerbos/commit/4d5d0c5159ae9af14b03845a8db62b878ef8a1b4 "") enhancement: Relax naming conventions for resource kinds, principals and roles ( [#1762](https://github.com/cerbos/cerbos/pull/1762 "")) **Bug fixes** • [0b7a189](https://github.com/cerbos/cerbos/commit/0b7a189f7c7c92d2d1ecf96cce7854073ce1d32c "") fix(docs): Typo in Calling Cerbos ( [#1726](https://github.com/cerbos/cerbos/pull/1726 "")) • [6b09c62](https://github.com/cerbos/cerbos/commit/6b09c624bc407e92fbfa733627ef469683555e50 "") fix(planner): Lambda body can be a field selection ( [#1720](https://github.com/cerbos/cerbos/pull/1720 "")) • [91a0d48](https://github.com/cerbos/cerbos/commit/91a0d48bcee8e4d28a0ef916bb80f8fa7415e4be "") fix: Evict policies from cache after disable or enable ( [#1711](https://github.com/cerbos/cerbos/pull/1711 "")) • [a29a992](https://github.com/cerbos/cerbos/commit/a29a99266434f27c3e4466c184772ecdf356a563 "") fix: Ignore invalid expressions ( [#1799](https://github.com/cerbos/cerbos/pull/1799 "")) • [7bfa52a](https://github.com/cerbos/cerbos/commit/7bfa52afb7c8369be1f6e8885debc096acdb85a1 "") fix: Normalize Git store subdirectory config to handle leading ``` ./ ``` correctly ( [#1774](https://github.com/cerbos/cerbos/pull/1774 "")) **Documentation** • [c7c5f37](https://github.com/cerbos/cerbos/commit/c7c5f37141ca44dcb9b174ac5d6882eb4eadf949 "") docs(sdk): Update SDK examples ( [#1731](https://github.com/cerbos/cerbos/pull/1731 "")) • [34f6859](https://github.com/cerbos/cerbos/commit/34f685999b61dc707420ac85c4e382047d94cb19 "") docs: Add testdata schema URLs ( [#1779](https://github.com/cerbos/cerbos/pull/1779 "")) • [eaaed3d](https://github.com/cerbos/cerbos/commit/eaaed3d0027e79f7e0870e49eefd3abd197cc96b "") docs: Caveats of sharing a DB with multiple instances ( [#1743](https://github.com/cerbos/cerbos/pull/1743 "")) • [a8ad220](https://github.com/cerbos/cerbos/commit/a8ad220af96714bc82c17d484209e1b940c98dbc "") docs: Fix typo in 03\_calling-cerbos.adoc ( [#1714](https://github.com/cerbos/cerbos/pull/1714 "")) • [b606512](https://github.com/cerbos/cerbos/commit/b6065122e777fac835d48f2fb55a709afeec8aed "") docs: Remove deprecated endpoint/rpc ( [#1734](https://github.com/cerbos/cerbos/pull/1734 "")) • [4fbbe36](https://github.com/cerbos/cerbos/commit/4fbbe36288c44f9bb9cdf734ccb94cf8a320c6a1 "") docs: Stop building docs for older versions ( [#1716](https://github.com/cerbos/cerbos/pull/1716 "")) • [a2cf9c9](https://github.com/cerbos/cerbos/commit/a2cf9c9a05feb9f62e2ae452db3d8c7038754c49 "") docs: Update examples for handling expressions beginning with quote ( [#1739](https://github.com/cerbos/cerbos/pull/1739 "")) **Chores** • [4a690fd](https://github.com/cerbos/cerbos/commit/4a690fd883b9f575110000ea775d63c67c319d98 "") chore(ci): Always run ``` upload-test-times ``` after ``` test ``` ( [#1756](https://github.com/cerbos/cerbos/pull/1756 "")) • [2b7c99b](https://github.com/cerbos/cerbos/commit/2b7c99b44b2198bc741fe75da38b4ac591e30b82 "") chore(ci): Create PRs for Homebrew formula updates ( [#1704](https://github.com/cerbos/cerbos/pull/1704 "")) • [98de402](https://github.com/cerbos/cerbos/commit/98de402697fb1c7e29d08ca0fc378310c27d0995 "") chore(ci): Debug logging for server tests ( [#1791](https://github.com/cerbos/cerbos/pull/1791 "")) • [711844a](https://github.com/cerbos/cerbos/commit/711844abd82bdcb0f36bc0f1877fc69554eae261 "") chore(ci): Increase timeout for client tests ( [#1793](https://github.com/cerbos/cerbos/pull/1793 "")) • [bc1a4d5](https://github.com/cerbos/cerbos/commit/bc1a4d5ab73e8ef1d082cddc68bb6ed0dd8ea140 "") chore(ci): Publish prerelease images tagged by commit hash ( [#1736](https://github.com/cerbos/cerbos/pull/1736 "")) • [5691a1b](https://github.com/cerbos/cerbos/commit/5691a1b211c7ce5bdde2b53d87e5ee3130002de3 "") chore(ci): Split snapshots job ( [#1796](https://github.com/cerbos/cerbos/pull/1796 "")) • [2479397](https://github.com/cerbos/cerbos/commit/2479397cf98ccf84e4697ee3d7ade28558827336 "") chore(ci): Switch to Coveralls ( [#1751](https://github.com/cerbos/cerbos/pull/1751 "")) • [b3c81ff](https://github.com/cerbos/cerbos/commit/b3c81ff0dec7fd179b118333724c1a24c597946f "") chore(ci): Upload test coverage from snapshot builds ( [#1764](https://github.com/cerbos/cerbos/pull/1764 "")) • [fdf5f2e](https://github.com/cerbos/cerbos/commit/fdf5f2e7ad9466858e71a6fa81c8c2cbdc998b53 "") chore(ci): Use experimental 'loopvar' released with Go 1.21 ( [#1738](https://github.com/cerbos/cerbos/pull/1738 "")) • [3738d7c](https://github.com/cerbos/cerbos/commit/3738d7c8c4a758943a1d080f2e903a310483b56f "") chore(deps): Bump [github.com/cyphar/filepath-securejoin](http://github.com/cyphar/filepath-securejoin "") from 0.2.3 to 0.2.4 in /tools ( [#1788](https://github.com/cerbos/cerbos/pull/1788 "")) • [e7aff6e](https://github.com/cerbos/cerbos/commit/e7aff6ec2a6ee8c315d91bf6268d94886ca2de1f "") chore(deps): Downgrade pterm to v0.12.66 ( [#1787](https://github.com/cerbos/cerbos/pull/1787 "")) • [81122c6](https://github.com/cerbos/cerbos/commit/81122c6a594651910949ff19f0eb9d90299824d9 "") chore(deps): Update actions/checkout action to v4 ( [#1795](https://github.com/cerbos/cerbos/pull/1795 "")) • [0959bda](https://github.com/cerbos/cerbos/commit/0959bda653524e687191d6215ef024c5b36033d3 "") chore(deps): Update bufbuild/buf-setup-action action to v1.25.0 ( [#1709](https://github.com/cerbos/cerbos/pull/1709 "")) • [e4410ce](https://github.com/cerbos/cerbos/commit/e4410ceaac9b8ee39d2b2bba1c941fd0727f74ad "") chore(deps): Update bufbuild/buf-setup-action action to v1.25.1 ( [Sign up for a free Cerbos Hub account](https://hub.cerbos.cloud/?_gl=1*k547e1*_ga*MTk1NjcwNzQ1MC4xNjY2Mjc5NjI2*_ga_8G3G3MS838*MTcwNjA5NzEyNi43NTUuMS4xNzA2MDk3MTI4LjU4LjAuMA.. "") 💥 New feature #1 ``` Embeddable authorization policies via WebAssembly ``` • Cerbos Hub also provides an embeddable version of the policies that allow for taking authorization decisions on-device, at edge, and in environments where it is not possible to run a service. • The Cerbos Hub CI/CD pipeline will produce bundles, keeping them in sync with your policies on every change. • The access to be facilitated in applications will be via the Cerbos SDKs. And they handle auth checks without needing a roundtrip to the backend service. 🚀 [Check out the documentation for more](https://docs.cerbos.dev/cerbos-hub/decision-points-embedded "") 🚀 💥 New feature #2 ``` Write and test policies in the Cerbos Hub's IDE Collaborative Playground ``` • For those who are familiar with Cerbos’ open source product, Cerbos PDP, the [Cerbos Playground](/content/features-benefits-and-use-cases/cerbos-playground ""/index.html) is going to be a familiar concept. • It is an interactive space where users can write, test, and simulate Cerbos policies in real time. • Cerbos Hub now has a full-featured collaborative IDE - Cerbos Hub Playground, to develop, iterate, and test policy. • It comes with instant feedback on changes, It comes with an automated test runner, it integrates into your git-based workflow, Play with the capabilities of Cerbos without any setup or installation with included sample policies. 🚀 [Read the documentation for more](https://docs.cerbos.dev/cerbos-hub "") 🚀 📃Resources📃 • Cerbos Hub - [Start for free](/content/product-cerbos-hub ""/index.html) • [Cerbos Hub documentation](https://docs.cerbos.dev/cerbos-hub "") • Join our [Slack Community](https://community.cerbos.dev/?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--KU3vvp-ZXf1V9PJjln1SE8gjeJilKZScRAz_gD09b7Ez7TOCDjW_wdhgA5O0gxzuXQSkU "") to be in the know of the latest developments • We want to help build or review your first policy. [Book a 30-minute free workshop](https://go.cerbos.io/workshop?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--KU3vvp-ZXf1V9PJjln1SE8gjeJilKZScRAz_gD09b7Ez7TOCDjW_wdhgA5O0gxzuXQSkU "") • Cerbos PDP is [open source](https://github.com/cerbos/cerbos?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--KU3vvp-ZXf1V9PJjln1SE8gjeJilKZScRAz_gD09b7Ez7TOCDjW_wdhgA5O0gxzuXQSkU ""). Feel free to browse or contribute, and don't forget to drop a star ⭐ 💡️Note: I am here to assist you. Feel free to contact me anytime with questions or concerns at **#C02A364JYMQ** 🎉 1 r Rohit Ghumare 01/31/2024, 4:00 AM 🤔 **Simplify Access Control & Reduce Security Vulnerabilities In Node.js, React and Serverless Apps** 🤔 _**Find out how Cerbos Hub simplifies access control in Node.js, React, and serverless apps and reduces security vulnerabilities**_ ``` Maintaining roles, permissions, and authorization policies within your JavaScript front-end and full-stack apps creates technical debt and security vulnerabilities. What if you need to replicate those same policies in an additional Express.js or Next.js app? Do you build and maintain separate codebases, creating an even more significant threat? ``` 👋 Join **@Alex Olivier (Cerbos)**, _**Cerbos**_ Chief Product Officer, and Wesley, presenter of the popular _**ByteGrad**_ Youtube channel, as they demonstrate how easy it is to author permissions and policy changes using Cerbos and deploy those changes without changing any other code. 🔗 [Join here to register for the webinar](https://zoom.us/webinar/register/9017066292629/WN_jcmzN9DGQ-ezlJvdhK62RQ "") 🚀 🤯 In this 45-minute session, you will learn to: • Set up a free policy repository on **Cerbos Hub** and define roles and permissions for your app. • Instantly synchronize policy changes across your entire app portfolio - **front-end React and Next.js apps, mobile, APIs, and back-end Node.js** services. • Use **WASM libraries** to operate and synchronize access control on front-end frameworks like React, across any **cloud providers**, and in serverless functions and architectures. Copy code ``` We'll also have live Q&A, so bring your questions! 🎙️ ``` r Rohit Ghumare 02/05/2024, 4:00 AM Hello, Connections👋, We're hosting a webinar on 8th Feb 2024 with Wesley from Bytegrad, and we're excited to extend our FREE seats to you! Please register for the event today to avoid consequences later. 🚀 **```** **Simplify Access Control in Your Apps with Cerbos Hub & Eliminate Months of Coding** **```** _We’ll also have live Q&A, so bring your questions!_ 🔗 [Join here to register for the webinar](https://zoom.us/webinar/register/9017066292629/WN_jcmzN9DGQ-ezlJvdhK62RQ "") **\`Speakers\`:** **@Alex Olivier (Cerbos), Chief Product Officer** Alex Olivier is the CPO and Co-founder at Cerbos. He has designed enterprise solutions from the ground up as an engineer, tech lead, and product manager, always with an eye on the developer experience. At Microsoft, Qubit, and many startups, he designed platforms that helped teams move faster at scale, focusing on core components like authorization, data management, and security. **Wesley, Founder** **@ByteGrad** Wesley is the driving force behind the popular ByteGrad YouTube channel that demystifies programming for developers at every experience level, with over 85k subscribers and 1 million total views. Wesley has also authored popular courses such as "Professional React & Next.js," further solidifying his reputation as a leading voice for the developer community. Click here👇 🔗 [Join here to register for the webinar](https://zoom.us/webinar/register/9017066292629/WN_jcmzN9DGQ-ezlJvdhK62RQ "") GitHub 02/20/2024, 4:17 AM [Release - v0.34.0](https://github.com/cerbos/cerbos/releases/tag/v0.34.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.34.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.34.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.34.0.html "") **Changelog** **Features** • [4591b0d](https://github.com/cerbos/cerbos/commit/4591b0d596c4f33d85ea1e47a0933de9a4eed7f0 "") feat: Add tests filtering ( [#1977](https://github.com/cerbos/cerbos/pull/1977 "")) • [42e8442](https://github.com/cerbos/cerbos/commit/42e84420da1fae35774e570e04b157824ae6d166 "") feat: Better diagnostic error messages for policy issues ( [#1960](https://github.com/cerbos/cerbos/pull/1960 "")) **Enhancements** • [36b0e6d](https://github.com/cerbos/cerbos/commit/36b0e6d6f376fa136237215fe24d4248308b2da5 "") enhancement(ci): Sign release artifacts ( [#1959](https://github.com/cerbos/cerbos/pull/1959 "")) • [5db9ab0](https://github.com/cerbos/cerbos/commit/5db9ab03d16415152b8009d585507f25d4fc3661 "") enhancement(ci): Validate Helm chart in CI ( [#1957](https://github.com/cerbos/cerbos/pull/1957 "")) • [90f198a](https://github.com/cerbos/cerbos/commit/90f198a2040e0e386502fddf2bb6bdf012f3c0b3 "") enhancement: Better compilation errors ( [#1968](https://github.com/cerbos/cerbos/pull/1968 "")) • [707278f](https://github.com/cerbos/cerbos/commit/707278ffcb0f77832d939d8a420dd6110fced747 "") enhancement: Detailed load errors in REPL ( [#1985](https://github.com/cerbos/cerbos/pull/1985 "")) **Bug fixes** • [4f90a5c](https://github.com/cerbos/cerbos/commit/4f90a5c8982785e643ad342a0f2c45ab1d9aadf9 "") fix: Record HTTP remote address as peer address for HTTP requests ( [#1964](https://github.com/cerbos/cerbos/pull/1964 "")) **Documentation** • [4afdc2f](https://github.com/cerbos/cerbos/commit/4afdc2f88a832a3348fa07faf0e1c13e5005f1dc "") docs: Fix branch filter ( [#1958](https://github.com/cerbos/cerbos/pull/1958 "")) **Chores** • [05ef26b](https://github.com/cerbos/cerbos/commit/05ef26b989082618b6dea43f78bd3bf6aa210694 "") chore(ci): Add correct permissions to snapshot job ( [#1962](https://github.com/cerbos/cerbos/pull/1962 "")) • [f24bec2](https://github.com/cerbos/cerbos/commit/f24bec2d1018c225de3efbbb908368de12551dda "") chore(ci): Add cosign to snapshot build job ( [#1961](https://github.com/cerbos/cerbos/pull/1961 "")) • [8db9898](https://github.com/cerbos/cerbos/commit/8db9898212a72a52c840a753addcec0635d5cbd0 "") chore(ci): Fix workflow permissions ( [#1963](https://github.com/cerbos/cerbos/pull/1963 "")) • [cfed07f](https://github.com/cerbos/cerbos/commit/cfed07f9e71cb8422a5ff71bce1c3e7430f697c8 "") chore(ci): Use master version of govulncheck ( [#1967](https://github.com/cerbos/cerbos/pull/1967 "")) • [b89c2c7](https://github.com/cerbos/cerbos/commit/b89c2c78a7b24aaa6644212b2afea0f7035feef7 "") chore(deps): Bump [github.com/opencontainers/runc](http://github.com/opencontainers/runc "") from 1.1.5 to 1.1.12 ( [#1971](https://github.com/cerbos/cerbos/pull/1971 "")) • [7918e5e](https://github.com/cerbos/cerbos/commit/7918e5e96dfe271fdbee57c9f9417c59e0bb59a8 "") chore(deps): Bump [helm.sh/helm/v3](http://helm.sh/helm/v3 "") from 3.14.0 to 3.14.1 ( [#1986](https://github.com/cerbos/cerbos/pull/1986 "")) • [5cf243a](https://github.com/cerbos/cerbos/commit/5cf243a17b98d7367c67459ef7a844afaf9927e3 "") chore(deps): Update actions/cache action to v4 ( [#1955](https://github.com/cerbos/cerbos/pull/1955 "")) • [dc8cf7f](https://github.com/cerbos/cerbos/commit/dc8cf7fb3751225a786c32afad1bcd08bf9d0084 "") chore(deps): Update actions/setup-go action to v5 ( [#1990](https://github.com/cerbos/cerbos/pull/1990 "")) • [5574e85](https://github.com/cerbos/cerbos/commit/5574e85a3720612ca9b7b5c4acfc1fac6f5dc1c2 "") chore(deps): Update github actions deps ( [#1973](https://github.com/cerbos/cerbos/pull/1973 "")) • [e510788](https://github.com/cerbos/cerbos/commit/e510788957c435b6ff10014fec604d06042a76d7 "") chore(deps): Update github actions deps ( [#1983](https://github.com/cerbos/cerbos/pull/1983 "")) • [58a915c](https://github.com/cerbos/cerbos/commit/58a915c3d28043c7dc6469a0e8bc28f18739a3b4 "") chore(deps): Update go deps ( [#1954](https://github.com/cerbos/cerbos/pull/1954 "")) • [e683b1d](https://github.com/cerbos/cerbos/commit/e683b1d2705cc16dea043c3679685818556c89b8 "") chore(deps): Update go deps ( [#1974](https://github.com/cerbos/cerbos/pull/1974 "")) • [9bc3226](https://github.com/cerbos/cerbos/commit/9bc32263e669a67b585770774b5320384722fe38 "") chore(deps): Update go deps ( [#1984](https://github.com/cerbos/cerbos/pull/1984 "")) • [f151096](https://github.com/cerbos/cerbos/commit/f1510961179b5580878be821c0bc0ac66a977017 "") chore(deps): Update go deps ( [#1989](https://github.com/cerbos/cerbos/pull/1989 "")) • [0c095fc](https://github.com/cerbos/cerbos/commit/0c095fcd874ed0161cbda16d505977f4cbb37675 "") chore(deps): Update module [github.com/goreleaser/goreleaser](http://github.com/goreleaser/goreleaser "") to v1.24.0 \[security\] ( [#1976](https://github.com/cerbos/cerbos/pull/1976 "")) • [9cf901b](https://github.com/cerbos/cerbos/commit/9cf901b4ac5dbd3f0c70396fd9da3bef75474936 "") chore(docs): Readme update ( [#1965](https://github.com/cerbos/cerbos/pull/1965 "")) • [aad2e98](https://github.com/cerbos/cerbos/commit/aad2e98a370dcd003b4be1bcd84c0e13a270c97a "") chore(docs): Readme update ( [#1966](https://github.com/cerbos/cerbos/pull/1966 "")) • [e5c7bef](https://github.com/cerbos/cerbos/commit/e5c7beffe3af34b84539b1bc49da7f60037c6d57 "") chore(docs): Update header to have tabs for PDP and Hub ( [#1975](https://github.com/cerbos/cerbos/pull/1975 "")) • [c9d468d](https://github.com/cerbos/cerbos/commit/c9d468d8268284b99d3953cf34dce6fec9dc44af "") chore(release): Add 0.34.0 release notes ( [#1991](https://github.com/cerbos/cerbos/pull/1991 "")) • [8534c79](https://github.com/cerbos/cerbos/commit/8534c7999c543a88c225ca1aaab56630d64d833e "") chore(release): Prepare release 0.34.0 • [563bec1](https://github.com/cerbos/cerbos/commit/563bec15967dbd40c964d9d644a95ea3e19d3802 "") chore(version): Bump version to 0.34.0 • [e4ebc88](https://github.com/cerbos/cerbos/commit/e4ebc884027d31b2f420e722da66fdade880a7e6 "") chore: Add JSON test cases for parser ( [#1952](https://github.com/cerbos/cerbos/pull/1952 "")) • [0dd8dad](https://github.com/cerbos/cerbos/commit/0dd8dadb25e4bf8a2482ba17e8c6f98440e7de98 "") chore: Add ability to parse well-known types ( [#1972](https://github.com/cerbos/cerbos/pull/1972 "")) • [c253d87](https://github.com/cerbos/cerbos/commit/c253d87e7af8247aad13c16e90630ea54f3ad235 "") chore: Copy metadata to runtime policies ( [#1981](https://github.com/cerbos/cerbos/pull/1981 "")) • [bc84737](https://github.com/cerbos/cerbos/commit/bc84737e968d686116b0dfca70f56e712876645e "") chore: Handle invalid YAML files containing unterminated strings ( [#1970](https://github.com/cerbos/cerbos/pull/1970 "")) • [b10b139](https://github.com/cerbos/cerbos/commit/b10b13917792428f2432fd1750593eaa53385254 "") chore: Move compiled policies annotations to \*PolicySet ( [#1988](https://github.com/cerbos/cerbos/pull/1988 "")) • [4798453](https://github.com/cerbos/cerbos/commit/4798453444f2c9ca34362dba748fcad2dcd03933 "") chore: Reduce Docker healthcheck interval ( [#1978](https://github.com/cerbos/cerbos/pull/1978 "")) • [03f95ec](https://github.com/cerbos/cerbos/commit/03f95ec6cb3afa02d7535fb9764ee4b0ac4e69f8 "") chore: Remove start-period from Docker health check ( [#1979](https://github.com/cerbos/cerbos/pull/1979 "")) • [353aa08](https://github.com/cerbos/cerbos/commit/353aa089788cfae9a6cd03cdef1524ead10a8c3c "") chore: Switch workspace mode off for vulnerability check ( [#1953](https://github.com/cerbos/cerbos/pull/1953 "")) • [199ae8d](https://github.com/cerbos/cerbos/commit/199ae8df40831b3a5965776191e01e4bb347d1d4 "") chore: Update test filtering logic ( [#1992](https://github.com/cerbos/cerbos/pull/1992 "")) • [d022db1](https://github.com/cerbos/cerbos/commit/d022db1e12df923ca39d9449e6acdba3a0b1a6c3 "") chore: Use Go 1.22 ( [#1982](https://github.com/cerbos/cerbos/pull/1982 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 02/27/2024, 5:40 AM Hello, everyone! We just published a [blog post, summarising the insights shared by Cerbos’ CEO and Co-Founder, Emre Baran, and Co-Founder and CPO, Alex Olivier, on the Jamstack Radio podcast](/content/blog/jamstack-radio-podcast-revolutionizing-access-control ""/index.html). 💡😊 Check out the episode to learn how Cerbos is simplifying complex access control challenges, and fostering a more secure and efficient development environment 👍 2 a Anna Paykina 03/04/2024, 5:31 AM Hey, Cerbos community 👋 We recently published a [blog post, exploring the importance of authorization layers in increasing your system’s security](/content/blog/the-importance-of-authorization-layers ""/index.html). 🛡️ Please feel free to check it out and let us know what you think 😊 ✅ 1 m - 2 - 1 r Rohit Ghumare 03/11/2024, 5:00 AM 📣 _Attention all Open Source Contributors and Devs!_ 📣 We've hit a milestone at Cerbos and we're excited to share the big news with our community. 🎉 _```_ _Cerbos_ _```_ _and_ _```_ _cerbosctl_ _```_ _are now available as npm packages!_ 🚀 Gone are the days of managing Docker containers for your authorization needs. With Cerbos directly accessible via ``` npm ``` , you can effortlessly integrate it into your projects with a simple \`\`npx cerbos\`\` command or by adding it as a script in your ``` package.json ``` . What’s in it for you? • 🛠️ Smooth integration into your workflows. • 🧾 Verifiable package integrity, giving you peace of mind about the code you use. • 🔒 Enhanced supply-chain security, making your development process safer than ever. This is more than just a release; it’s a step forward in secure and transparent software development. Head over to ``` npm ``` to see the new provenance tick and get your hands on the latest from Cerbos. 🔗 [Cerbos on npm](https://www.npmjs.com/package/cerbos "") Keep building amazing things, with trust and security right at your codebase. 🛡️💻 👌 2 r Rohit Ghumare 03/14/2024, 5:00 AM 🚀 _Calling all KubeCon + CloudNativeCon 2024 Europe Participants!_ 🚀 Team Cerbos is heading to Paris! 🇫🇷 We're thrilled to announce that we'll be at KubeCon + CloudNativeCon Europe this year. 🎉 📍 Find us at _```_ _booth #E32_ _```_ where we're set to showcase how Cerbos is simplifying authorization for developers. 🔐 Tired of wading through complex permission layers? We've got you covered. With Cerbos, embrace a world where managing permissions is easy, so you can focus on what you do best: building great software. Don't miss the chance to: • Get a firsthand look at our innovative approach to authorization. • Meet the minds behind Cerbos and learn how we can help streamline your security protocols. • Discover tips and tricks to implement fine-grained, context-aware permissions with ease. We can't wait to meet you there and explore how Cerbos can simplify and secure your development life. See you at booth #E32! 🙌 1 cerbie 6 ☸️ 3 🧑‍💻 3 🇫🇷 6 r Rohit Ghumare 03/28/2024, 3:15 PM Hey, ``` Cerbos community ``` ! 🎉 Great news! The ebook from Flagsmith that **@Alex Olivier (Cerbos)**, our CPO, contributed to is officially out! 🚀📚 It's packed with insights into modern development practices in banking, and we're thrilled to be a part of it. We'd love your support in spreading the word! If you could like and share our posts on LinkedIn and Twitter, it would mean the world to us: • LinkedIn: [Modern Development Practices in Banking](https://www.linkedin.com/posts/cerbos-dev_modern-development-practices-in-banking-activity-1234567890 "") • Twitter: [Check out the ebook feat. Alex Olivier](https://twitter.com/cerbosdev/status/1773386238956843142 "") For those keen to dive in, we've attached the ebook PDF here for your convenience. 📖 Don't miss out on exploring this valuable resource: [Download the ebook](https://www.flagsmith.com/ebook/modern-development-practices-in-banking-a-playbook?utm_campaign=topic_authorization&utm_source=slack&utm_medium=social&utm_content=&utm_term= "") Huge thanks to Flagsmith for collaborating on this initiative. 🙏 Let's keep pushing the boundaries of what's possible in banking development together! ⌨️ 4 🚀 5 🤯 4 cerbie 7 🎉 6 🔐 5 🙌 7 GitHub 04/09/2024, 3:45 AM [Release - v0.35.1](https://github.com/cerbos/cerbos/releases/tag/v0.35.1 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.35.1** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.35.1.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.35.1.html "") **Changelog** **Chores** • [e5b322b](https://github.com/cerbos/cerbos/commit/e5b322b45c4328519a41ffc0a196cff59c336759 "") chore(ci): Output signature from cosign ( [#2089](https://github.com/cerbos/cerbos/pull/2089 "")) • [0dfd432](https://github.com/cerbos/cerbos/commit/0dfd43215155397b1be1b07f866af6642a249baf "") chore(release): Prepare release 0.35.1 • [4c9c159](https://github.com/cerbos/cerbos/commit/4c9c159f1bb9ba891b04a1e494f032ae71a57de0 "") chore(version): Bump version to 0.36.0 [cerbos/cerbos](https://github.com/cerbos/cerbos "") 🚀 3 cerbos 4 a Anna Paykina 04/11/2024, 6:34 AM **Hello, Cerbos community!** 😊 **Our [April newsletter](https://cerbos-20289770.hs-sites.com/cerbos-april-2024-update "") went out a few days ago, and we wanted to share the highlights with you.** Since our last update, we’ve released **[Cerbos PDP v0.35.1](https://docs.cerbos.dev/cerbos/prerelease/releases/v0.35.1?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 "")**, took a deep dive into building secure applications in a collaborative **[piece with Microsoft Entra](/content/blog/building-secure-applications-key-insights-on-authentication-and-authorization-from-cerbos-and-microsoft-entra?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 ""/index.html)**, discussed the importance of **[embracing WebAssembly](/content/blog/embracing-web-assembly-in-authorization?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 ""/index.html)** in authorization, examined **[authorization APIs](/content/blog/what-is-an-authorization-api?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 ""/index.html)**, and shared a piece on how Cerbos is designed to **[redefine how permissions and access control](/content/blog/cerbos-why-and-what?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 ""/index.html)** are implemented within applications. Our co-founder, Emre Baran, was featured on the **[From the Ground Up](/content/blog/from-the-ground-up-podcast-reshaping-the-landscape-of-dev-ops-through-innovative-authorization-solutions?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--hbTmk7B4r8Qhv6p00gHci7M9ZgShWAwY0HUZycngV9cC0EdXwGZQYaLeGfmmVEda838pDzUgkeygcFn3pZGLDjAuILgF1lZe1z-jrK_eQC-HK4S4 ""/index.html)** podcast, sharing insights from his entrepreneurial journey, and the inception of Cerbos. **If you’d like to be the first to receive Cerbos updates, you can [subscribe to our newsletter here](/content/subscribe ""/index.html).** 💡 4 cerbie 6 🎉 8 🙌 5 🙌🏻 1 📰 5 r Rohit Ghumare 04/15/2024, 4:00 AM 🎥 New Video Alert: Revolutionize Your Authorization with Cerbos! Dive into our comprehensive video demo with Bytegrad to see how you can transform your authorization practices. This video provides a step-by-step guide to effectively using Cerbos to secure your applications. 🎉 🔗 Check it out here: [Revolutionize Your Authorization with Cerbos - Watch Now!](/content/blog/revolutionize-your-authorization-with-cerbos-a-comprehensive-video-demo-bytegrad ""/index.html) 💡 Got questions or want to discuss the video? Drop your thoughts in this thread! cerbie 1 🙌 2 👀 1 👍 1 h Heidi Hokanson 04/17/2024, 9:03 AM Hi Cerbos Community! On May 7 we’re hosting a webinar featuring one of our Hub users, **@Edgar Rivera**, CTO at 4G Capital. This a great opportunity to hear from an expert on how authorization and Cerbos fit into his overall cloud strategy. And we’d love to see our community members there! Edgar will share how 4G Capital: • Saved over $260k in costs by modernizing their architecture and authorization strategy • Increased feature velocity and reduced technical debt with a scrappy team • Ensures secure access across the frontend, backend, and APIs to protect data privacy. Take a look at the details and **[register here](https://zoom.us/webinar/register/3617132968358/WN_9PxZE_stSFGuDLc1gj3I9g "").** r Rohit Ghumare 04/19/2024, 6:03 AM **Cerbos - 2500 Stars** 🌟 Hey everyone, we’ve just crossed ``` 2,500 stars ``` on GitHub for Cerbos! This is a huge milestone for us and it couldn’t have been possible without the hard work and dedication of everyone in this community. Thank you all for your contributions, support, and for believing in the power of open-source. Let’s take a moment to celebrate our collective achievement and set our sights on even bigger goals. 🌟🚀 Here’s to many more stars and successes in our future! Feel free to share the news and let everyone know about our amazing community! 🙌 3 cerbie 2 🎂 1 🎉 2 🌟 3 r Rohit Ghumare 04/23/2024, 4:00 AM 🌟 **```** **New Podcast Episode Alert in The Scripting Den!** **```** 🌟 Hey everyone! 🚀 Dive into the latest episode of "\*The Scripting Den\*" podcast, where **@Alex Olivier (Cerbos)**, Co-Founder and CPO of Cerbos, shares invaluable insights on the evolution of security as products transition from MVP to mature offerings. What to Expect: • Strategies on enhancing security during the scaling phase. • Tips on selecting the right tools to save resources and focus on innovation. • Understanding the importance of scalability and user feedback in product development. This episode is a treasure trove for developers, product managers, and tech entrepreneurs focused on refining their product post-MVP. Don't miss out on these expert strategies to ensure your product is secure, scalable, and set up for success! 🎧 Listen to the full episode here for a deeper understanding: [The Scripting Den Podcast](/content/blog/the-scripting-den-podcast-exploring-the-evolution-of-security-post-mvp-cerbos ""/index.html). Happy listening, and let’s discuss our thoughts here! What did you find most valuable? 💭 cerbie 3 🙌 3 🚀 2 a Anna Paykina 04/30/2024, 6:26 AM Join us for an exclusive look into Cerbos, the cutting-edge authorization technology that’s reshaping how developers, product teams, and security teams implement authorization solutions. 🛡️ [https://www.linkedin.com/events/episode10-cerbosdeepdive7189030118256738305/](https://www.linkedin.com/events/episode10-cerbosdeepdive7189030118256738305/ "") 🎙️ Identerati Office Hours Episode 10: Cerbos Deep Dive 📅 Today, 3pm CEST \| 9am EDT Our CEO and co-founder, [Emre Baran](https://www.linkedin.com/in/emrebaran/ ""), will guide you through the innovative world of Cerbos. Discover the origins of Cerbos, its core strengths, what sets it apart in the authz landscape, and the visionary path ahead. 💡 What’s in it for you? 1) Understand the Edge: Explore how Cerbos uses YAML over Rego for easier and faster policy definition. 2) Speed and Efficiency: Learn about Cerbos’ stateless PDP architecture that ensures rapid response times without compromising security. 3) Enterprise Ready: Gain insights into the enterprise control plane which is crucial for compliance and scaling in business environments. This session is a must for anyone involved in or interested in authorization technologies. Whether you’re looking to enhance your current systems or exploring new solutions, you’ll find valuable insights and practical takeaways. 🔗 [Sign up here](https://www.linkedin.com/events/episode10-cerbosdeepdive7189030118256738305/ "") cerbie 3 🙌 2 🎉 2 👏 2 👀 2 h Heidi Hokanson 04/30/2024, 2:27 PM TOMORROW at 11am ET - Join **@Alex Olivier (Cerbos)** on Cloud Native Live to learn about using GitOps for testable, versionable and auditable authorization. 📽️ **Cloud Native Live: GitOps for Application Authorization** 📅 May 1, 11am ET \| 3pm GMT **Description** The authorization logic for determining whether a user can do an action on a specific resource inside of the application code is some of the most sensitive and impactful if it isn't correct. Using modern GitOps approaches for testable, versionable and auditable authorization removes many of the barriers around user permissions and improves your security posture 🔗 [Register on the CNCF site](https://community.cncf.io/events/details/cncf-cncf-online-programs-presents-cloud-native-live-gitops-for-application-authorization/ "") 🎉 4 👍 4 cerbie 3 😎 3 🙌 4 h Heidi Hokanson 05/02/2024, 8:57 AM Hi ! 5 days to go until our live talk next week with **@Edgar Rivera** and **@Alex Olivier (Cerbos)** on future-proofing your back-end architecture. Edgar will share his experience designing an application that meets core fintech app requirements like regulatory compliance, clear audit logs, and fine-grained access control. Would love to see you all there! Here are the details: 📽️ **Future-proofing Fintech in the age of Cloud and Microservices** 📅 May 7, 1pm ET \| 8pm CET 🔗 [Register here](https://zoom.us/webinar/register/3617132968358/WN_9PxZE_stSFGuDLc1gj3I9g "") to get access to our live stream and a recording of the webinar emailed to you afterward. 🎉 1 💡 1 a Anna Paykina 05/03/2024, 6:27 AM **Hello, !** 😊 **Our [May newsletter](https://cerbos-20289770.hs-sites.com/cerbos-may-2024-update "") went out a few days ago, and we wanted to share the highlights with you.** Since our last update, we’ve put together a **[demo](/content/blog/introducing-enhanced-test-management-in-cerbos-hub-search-filter-and-view-test-results-easily?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs ""/index.html)** on the enhanced test management capabilities of Cerbos Hub, as well as thorough guides for **[Next.js](/content/blog/a-complete-guide-to-next-js-authorization?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs ""/index.html)** and **[React JS](/content/blog/how-to-implement-authorization-in-react-js?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs ""/index.html)** authorization, examined the **[importance of authorization](/content/blog/importance-of-authorization-in-transition-from-monolithic-to-microservices-architecture?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs ""/index.html)** in transition from monolithic to microservices architecture, and explored the evolution of security post-MVP on **[The Scripting Den podcast](/content/blog/the-scripting-den-podcast-exploring-the-evolution-of-security-post-mvp-cerbos?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs ""/index.html)**. Join us on May 7th for a **webinar** featuring our customer, 4G Capital, on the topic of 🔊💻\*”Future-proofing fintech security in the age of cloud & microservices”\*. If you would like to learn about scaling your business with cloud and microservices, while ensuring stringent data security and audit requirements, **and** discover how 4G Capital slashed costs by over $260k through strategic modernization of their architecture and authorization strategies - **[register here.](https://zoom.us/webinar/register/6217146401854/WN_9PxZE_stSFGuDLc1gj3I9g?utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz--vQPY68TtxEk_ulcUirTetkUUpGSwyCU4uBYTnzQmPUYTc0sH52ydz5Z46SGPsbLdU-FALOfYeOK5cqgt9u0zyo_WLTCNZy2J8Tl4CVhcb4i8ZjYs "")** **If you’d like to be the first to receive Cerbos updates, you can [subscribe to our newsletter here](/content/subscribe ""/index.html).** cerbie 6 🙌 5 👍 4 📰 3 👍🏻 1 🙌🏻 1 a Anna Paykina 05/08/2024, 10:41 AM , please check out our upcoming webinar: “Feature Flags & Authorization - Key Tools for Modern Development” 📅 Date & Time: May 22, 2024, 5:00 PM CEST \ 11 AM EDT 🔗 [Register here](https://zoom.us/webinar/register/7717151049723/WN_OxJB0TRPSVKAoC3Ks9C1Lw "") 🔗 👥 Speakers: [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), [Ben Rometsch](https://www.linkedin.com/in/benrometsch/ "") ⏺️ _PS. Can’t join us live? Register to receive the link to the recording in your inbox._ Join Cerbos and Flagsmith for a 1 hour webinar that dives deep into the integral roles of feature flags and authorization in software development, and includes demos of both solutions. Whether you’re looking to enhance user experience, streamline product releases, or bolster security, this webinar will equip you with the knowledge to leverage both feature flags and authorization effectively in your projects. Why attend? 🔸 Insights from Flagsmith: Discover how feature flags can revolutionize the way you deploy features and manage your testing environments, making your releases smoother and more controllable. 🔸 Insights from Cerbos: Learn about the critical importance of robust authorization systems in protecting resources and ensuring your business scales securely and efficiently. 🔸 Live Q&A: Get direct access to our experts, ask your questions, and gain deeper understanding of how these technologies can benefit your projects. See you there! 👋 💻 5 👀 6 🎉 4 🙌 6 cerbie 5 😊 5 👍 3 a - 2 - 1 GitHub 05/09/2024, 4:08 AM [Release - v0.36.0](https://github.com/cerbos/cerbos/releases/tag/v0.36.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.36.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.36.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.36.0.html "") **Changelog** **Features** • [e98d5f1](https://github.com/cerbos/cerbos/commit/e98d5f1f81281785d624a6c65dd7ebe2db0c5a99 "") feat: Add cerbosctl hub epdp list-candidates command ( [#2078](https://github.com/cerbos/cerbos/pull/2078 "")) • [7ba383d](https://github.com/cerbos/cerbos/commit/7ba383d14a40b404876f5f5d83f7fb4654391ba8 "") feat: Add cerbosctl inspect policies command ( [#2101](https://github.com/cerbos/cerbos/pull/2101 "")) **Enhancements** • [cdf2589](https://github.com/cerbos/cerbos/commit/cdf2589b0d9c53f5a5c5383f700ca96b6d910ed6 "") enhancement: Add audit log filtering to Hub backend ( [#2073](https://github.com/cerbos/cerbos/pull/2073 "")) • [b11597e](https://github.com/cerbos/cerbos/commit/b11597e7c02dd58b94d982e907ef49e97cc70781 "") enhancement: Apply perf patch to YAML parser ( [#2132](https://github.com/cerbos/cerbos/pull/2132 "")) • [2e335d5](https://github.com/cerbos/cerbos/commit/2e335d5e0b035298ae5ad30652b8559966630abb "") enhancement: Write audit logs asynchronously ( [#2104](https://github.com/cerbos/cerbos/pull/2104 "")) **Bug fixes** • [4929745](https://github.com/cerbos/cerbos/commit/4929745082e4e82794e87acce30d8d6de79cbb28 "") fix: Eagerly establish gRPC connection to avoid initial delay ( [#2105](https://github.com/cerbos/cerbos/pull/2105 "")) • [ea039c4](https://github.com/cerbos/cerbos/commit/ea039c4826794d8118bdfd8345b6e1d7472f9067 "") fix: Handle folded strings and indented newlines in YAML correctly ( [#2128](https://github.com/cerbos/cerbos/pull/2128 "")) • [8aac976](https://github.com/cerbos/cerbos/commit/8aac9761dadf0ae742bb6a000c8027748d899929 "") fix: Ignore context cancellation when writing audit log entries ( [#2113](https://github.com/cerbos/cerbos/pull/2113 "")) • [a88733f](https://github.com/cerbos/cerbos/commit/a88733fc1bb69d01ed960d2be5c7d09b0db2ad67 "") fix: Include implicit ``` EFFECT_DENY ``` in test failure details ( [#2117](https://github.com/cerbos/cerbos/pull/2117 "")) • [68fcdfa](https://github.com/cerbos/cerbos/commit/68fcdfaa05c663503129f22406318d3e6986164e "") fix: Kafka TLS using system CA ( [#2120](https://github.com/cerbos/cerbos/pull/2120 "")) • [61addb0](https://github.com/cerbos/cerbos/commit/61addb07c688df052b776d08729945a1b78d5b5d "") fix: Mark tests with missing expectations as errored ( [#2116](https://github.com/cerbos/cerbos/pull/2116 "")) • [0c755f2](https://github.com/cerbos/cerbos/commit/0c755f291a9f25e6cbd0199f042a366cccd86ed4 "") fix: Stop blocking Kafka audit publishing when an outage occurs ( [#2122](https://github.com/cerbos/cerbos/pull/2122 "")) **Documentation** • [b022d25](https://github.com/cerbos/cerbos/commit/b022d258bf4c0f5491a9f0609d3d13f5799b6d39 "") docs: Add documentation for Dagger Cerbos module ( [#2106](https://github.com/cerbos/cerbos/pull/2106 "")) • [31897e0](https://github.com/cerbos/cerbos/commit/31897e05ed7ac75d1c84d250f80bc26567265e60 "") docs: Document Hub features ( [#2133](https://github.com/cerbos/cerbos/pull/2133 "")) • [1a04715](https://github.com/cerbos/cerbos/commit/1a0471548440ef5e7e83d4875b6c215b7cb208a8 "") docs: Document how to verify cosign signatures ( [#2094](https://github.com/cerbos/cerbos/pull/2094 "")) **Chores** • [36d3681](https://github.com/cerbos/cerbos/commit/36d36817567c9553e239e621e3c8d40a9d8fa8f0 "") chore(ci): Check results of npm package tests ( [#2098](https://github.com/cerbos/cerbos/pull/2098 "")) • [82f774d](https://github.com/cerbos/cerbos/commit/82f774d338a0fb97d27cfe30b4ed8d5fdafcc9fc "") chore(ci): Fix E2E tests combining the host address with extra colon ( [#2114](https://github.com/cerbos/cerbos/pull/2114 "")) • [55b6826](https://github.com/cerbos/cerbos/commit/55b6826a3486378c0af1f3fa09d49ed415207c06 "") chore(ci): Remove unmaintained Netlify action ( [#2093](https://github.com/cerbos/cerbos/pull/2093 "")) • [c95f50f](https://github.com/cerbos/cerbos/commit/c95f50fa62574fbad50a7101574ad5c4b0804387 "") chore(ci): Update storage type for Jaeger chart ( [#2096](https://github.com/cerbos/cerbos/pull/2096 "")) • [2001128](https://github.com/cerbos/cerbos/commit/2001128f65d1f5953375bbdb7190030db55f6351 "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 26.0.0+incompatible to 26.0.2+incompatible in /tools ( [#2108](https://github.com/cerbos/cerbos/pull/2108 "")) • [f74f372](https://github.com/cerbos/cerbos/commit/f74f372da21b1380c733b34ef3f16941c69b2264 "") chore(deps): Bump [github.com/sigstore/cosign/v2](http://github.com/sigstore/cosign/v2 "") from 2.2.1 to 2.2.4 in /tools ( [#2097](https://github.com/cerbos/cerbos/pull/2097 "")) • [e2b73f0](https://github.com/cerbos/cerbos/commit/e2b73f011f37e0ec5d5b23fb1a859ad5fe53a710 "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.21.0 to 0.23.0 in /api/genpb ( [#2110](https://github.com/cerbos/cerbos/pull/2110 "")) • [5ac1c32](https://github.com/cerbos/cerbos/commit/5ac1c326c2e405b899cad287d787508ba46d07d8 "") chore(deps): Update github actions deps ( [#2125](https://github.com/cerbos/cerbos/pull/2125 "")) • [e7d828a](https://github.com/cerbos/cerbos/commit/e7d828a1d4035b0a3c58c582e204c8bd281e440e "") chore(deps): Update go deps ( [#2099](https://github.com/cerbos/cerbos/pull/2099 "")) • [5f96e64](https://github.com/cerbos/cerbos/commit/5f96e6409b53fc82bd197959543f8c2529c5cbde "") chore(deps): Update go deps ( [#2111](https://github.com/cerbos/cerbos/pull/2111 "")) • [a40093a](https://github.com/cerbos/cerbos/commit/a40093aeb752c7d5d2ac9fe287cfcd1f45d17fb7 "") chore(deps): Update go deps ( [#2124](https://github.com/cerbos/cerbos/pull/2124 "")) • [38c0f24](https://github.com/cerbos/cerbos/commit/38c0f2441c8fddcef658420c1b799a91af344a32 "") chore(deps): Update go deps ( [#2135](https://github.com/cerbos/cerbos/pull/2135 "")) • [236ab29](https://github.com/cerbos/cerbos/commit/236ab29d3c8c6c96dbdc3c3586de35e058bf42c1 "") chore(deps): Update go deps ( [#2139](https://github.com/cerbos/cerbos/pull/2139 "")) • [56a29ba](https://github.com/cerbos/cerbos/commit/56a29ba9c397dbbd4ffb8b1e83b7e861e1525b64 "") chore(deps): Update go deps to v2 (major) ( [#2138](https://github.com/cerbos/cerbos/pull/2138 "")) • [394cfa0](https://github.com/cerbos/cerbos/commit/394cfa0e34cff6e418f12a37929debca38c60442 "") chore(deps): Update golangci/golangci-lint-action action to v5 ( [#2127](https://github.com/cerbos/cerbos/pull/2127 "")) • [70db704](https://github.com/cerbos/cerbos/commit/70db70483e8ae613b32a642533a95a04a20889c1 "") chore(deps): Update golangci/golangci-lint-action action to v5.3.0 ( [#2136](https://github.com/cerbos/cerbos/pull/2136 "")) • [c862740](https://github.com/cerbos/cerbos/commit/c862740147b70d438cbd498aa0399750b165c34b "") chore(deps): Update node.js deps ( [#2100](https://github.com/cerbos/cerbos/pull/2100 "")) • [cd4894a](https://github.com/cerbos/cerbos/commit/cd4894a9128d4334e7293535990e61ce22a93b1f "") chore(deps): Update node.js deps ( [#2126](https://github.com/cerbos/cerbos/pull/2126 "")) • [4e40af6](https://github.com/cerbos/cerbos/commit/4e40af69780e5be2d7b1ded0720c4a12f7c5a7a2 "") chore(deps): Update node.js deps ( [#2137](https://github.com/cerbos/cerbos/pull/2137 "")) • [603d0ef](https://github.com/cerbos/cerbos/commit/603d0ef04bc025b3e1be53b7fe5c4ab4da7c5758 "") chore(deps): Update pnpm to v9.0.5 ( [#2112](https://github.com/cerbos/cerbos/pull/2112 "")) • [8f7af37](https://github.com/cerbos/cerbos/commit/8f7af37e886424943309e383c7ade957ce87aedb "") chore(deps): Update to go1.22.3 ( [#2143](https://github.com/cerbos/cerbos/pull/2143 "")) • [a5d835b](https://github.com/cerbos/cerbos/commit/a5d835b514a272891f0d0630f60b0ebc2af8d74f "") chore(deps): Use latest Cerbos SDK ( [#2140](https://github.com/cerbos/cerbos/pull/2140 "")) • [d797ebb](https://github.com/cerbos/cerbos/commit/d797ebb364ef4ceb773f413a48f367fce9a1c590 "") chore(docs): Update cloud-platforms.adoc ( [#2109](https://github.com/cerbos/cerbos/pull/2109 "")) • [531e896](https://github.com/cerbos/cerbos/commit/531e8963d840d2498841b13eb336ac0045bd7ff5 "") chore(release): Add 0.35.1 release notes ( [#2090](https://github.com/cerbos/cerbos/pull/2090 "")) • [80e10c1](https://github.com/cerbos/cerbos/commit/80e10c1086f3e0053439477e0ef6f7f66dede302 "") … [cerbos/cerbos](https://github.com/cerbos/cerbos "") r Rohit Ghumare 05/09/2024, 5:46 AM 🌟 **Hey everyone!** Just wanted to share some exciting insights from the recent CNCF demo where our CPO, Alex Olivier showcased the power of ``` GitOps for application authorization ``` . 🚀 👉 Main Takeaways: • Simplify Authorization: Move from complex code to straightforward, versionable policies. • Enhanced Scalability: Enjoy the benefits of a stateless, scalable architecture perfect for cloud-native setups. • Security and Compliance: With centralised audit logs, every decision can be tracked for better compliance and monitoring. 🎥 For those who missed it, you can watch the full demo [here](/content/blog/gitops-for-application-authorization ""/index.html) to see how these strategies can streamline your development workflow and enhance security measures. 💬 Please share your thoughts or how you might apply these GitOps principles in your projects! Let’s get the conversation going! 🌐 a Anna Paykina 05/21/2024, 5:43 AM Hey, ! There’s just 1 day left until our webinar with Flagsmith! _(PS. Exclusive registration bonus included)_ 📅 Date & Time: May 22, 2024, 05:00 PM CEST / 11:00 AM EDT 🔗 **[Secure Your Spot Now](https://zoom.us/webinar/register/7717151049723/WN_OxJB0TRPSVKAoC3Ks9C1Lw "")** 🔗 🧩 Learn from [Alex Olivier](https://www.linkedin.com/in/alexolivier/ "") of Cerbos and [Ben Rometsch](https://www.linkedin.com/in/benrometsch/ "") of Flagsmith about leveraging feature flags and robust authorization to enhance your software development. 🧩 See these technologies in action and understand how they can be applied to your projects. 🧩 Have your specific questions answered by our experts in real-time. 💡 Exclusive Registration Bonus💡 When you register, you’ll gain access to specialized guides designed to take your skills to the next level: 👉 From Cerbos: Receive an in-depth guide on implementing effective authorization models to secure your applications. 👉 From Flagsmith: Get a comprehensive manual on transitioning your project or company to using feature flags, paving the way for more controlled and flexible deployments. As well as as a playbook on modern development practices in banking. Register today to ensure you don’t miss out on these exclusive resources that will empower you to streamline product releases and bolster security within your projects. 🙌 3 😊 2 💻 3 💡 3 g - 2 - 2 a Andre Du Plessis 05/21/2024, 6:34 AM Thank you for the reminder, Anna. Could you perhaps indicate whether we will have access to the webinar recordings for future reference, please. I keep track of these (dedicated bookmark sets in my browser) for cases I want to go back to see and hear specific topics that were discussed. a - 2 - 2 GitHub 06/18/2024, 4:03 AM [Release - v0.37.0](https://github.com/cerbos/cerbos/releases/tag/v0.37.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.37.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.37.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.37.0.html "") **Changelog** **Features** • [f2ad52f](https://github.com/cerbos/cerbos/commit/f2ad52fc0af3debf495b06dad03e13f8259bdc0c "") feat(repl): Autocomplete for REPL directives, and a small fix for filenames ( [#2169](https://github.com/cerbos/cerbos/pull/2169 "")) • [89e6ee9](https://github.com/cerbos/cerbos/commit/89e6ee9b0a191ebd777f770ff1005f4fc873adf4 "") feat: Add filtering by policy IDs to InspectPolicies RPC ( [#2160](https://github.com/cerbos/cerbos/pull/2160 "")) • [2efb5e5](https://github.com/cerbos/cerbos/commit/2efb5e51f48bee99405baf5b551d856f5fe07fe8 "") feat: List local and imported variables in the policy with InspectPolicies ( [#2141](https://github.com/cerbos/cerbos/pull/2141 "")) **Enhancements** • [7de21d8](https://github.com/cerbos/cerbos/commit/7de21d8a393ac3977e65068fab59c9fe99a0c688 "") enhancement(helm): Allow deploying as a DaemonSet ( [#1658](https://github.com/cerbos/cerbos/pull/1658 "")) • [57cf574](https://github.com/cerbos/cerbos/commit/57cf57445ac385f7d4d483cd0573b3e882690d31 "") enhancement: Add policy id parameter to inspect command ( [#2174](https://github.com/cerbos/cerbos/pull/2174 "")) • [9a6450e](https://github.com/cerbos/cerbos/commit/9a6450eee76ee6505210a9fcedfce78bddadb476 "") enhancement: Context for YAML syntax errors ( [#2151](https://github.com/cerbos/cerbos/pull/2151 "")) • [b6f9a61](https://github.com/cerbos/cerbos/commit/b6f9a615d1161b308e75533230ac508ad9704cc0 "") enhancement: Ensure git protocol matches the URL ( [#2163](https://github.com/cerbos/cerbos/pull/2163 "")) • [3ea1ea0](https://github.com/cerbos/cerbos/commit/3ea1ea01d55f3b29ea9220e1f899ddbf2becaf57 "") enhancement: Formatting options for cerbosctl inspect command ( [#2179](https://github.com/cerbos/cerbos/pull/2179 "")) • [04f0373](https://github.com/cerbos/cerbos/commit/04f03734fed85ce256cc3de82d60bece552f1ce0 "") enhancement: InspectPolicies lists derived roles in the policy ( [#2186](https://github.com/cerbos/cerbos/pull/2186 "")) • [90bae03](https://github.com/cerbos/cerbos/commit/90bae03c78545c120a82edc969a69d43b8abb933 "") enhancement: Revise API limits ( [#2161](https://github.com/cerbos/cerbos/pull/2161 "")) **Bug fixes** • [df62cb6](https://github.com/cerbos/cerbos/commit/df62cb6a9fca5f19620ee271a16ae3fa005b0f79 "") fix(docs): Wildcard action wording ( [#2178](https://github.com/cerbos/cerbos/pull/2178 "")) • [f69dfc0](https://github.com/cerbos/cerbos/commit/f69dfc0e210a80167cddd89693ff212869367f54 "") fix: Detect incorrectly indented YAML ( [#2153](https://github.com/cerbos/cerbos/pull/2153 "")) • [c8edda5](https://github.com/cerbos/cerbos/commit/c8edda5e7d5bc2e5d895d44fc7cbb790d1f7b599 "") fix: Work around gRPC-Gateway bug in ``` X-Forwarded-For ``` handling ( [#2152](https://github.com/cerbos/cerbos/pull/2152 "")) **Chores** • [7cd8ffd](https://github.com/cerbos/cerbos/commit/7cd8ffd4157da8f4cd97eebe309b761bd9dccc9b "") chore(ci): Clear disk space for npm build ( [#2149](https://github.com/cerbos/cerbos/pull/2149 "")) • [5ec9716](https://github.com/cerbos/cerbos/commit/5ec97160d4dbb4d54543cb889367ece886809cfb "") chore(ci): Clear disk space for release workflow ( [#2145](https://github.com/cerbos/cerbos/pull/2145 "")) • [27df29e](https://github.com/cerbos/cerbos/commit/27df29e24ce3d5ee7ada0ab0710454f14c308f7d "") chore(ci): Increase timeout for npm build stage ( [#2150](https://github.com/cerbos/cerbos/pull/2150 "")) • [342e93b](https://github.com/cerbos/cerbos/commit/342e93bb8defc6497fb71e3377cfda8cb25d374b "") chore(ci): Upgrade to GoReleaser v2 ( [#2184](https://github.com/cerbos/cerbos/pull/2184 "")) • [af7a526](https://github.com/cerbos/cerbos/commit/af7a526c03b6ed747de2fcd9805dea04b76b7576 "") chore(deps): Bump [github.com/Azure/azure-sdk-for-go/sdk/azidentity](http://github.com/Azure/azure-sdk-for-go/sdk/azidentity "") from 1.5.1 to 1.6.0 in /tools ( [#2185](https://github.com/cerbos/cerbos/pull/2185 "")) • [c7e7860](https://github.com/cerbos/cerbos/commit/c7e7860c30098eee5ab7960db7b8b05e39fd6472 "") chore(deps): Bump [github.com/goreleaser/goreleaser](http://github.com/goreleaser/goreleaser "") from 1.26.0 to 1.26.1 in /tools ( [#2154](https://github.com/cerbos/cerbos/pull/2154 "")) • [f567f6e](https://github.com/cerbos/cerbos/commit/f567f6eff396f4f3b0425f419fab155d1c0a4a4f "") chore(deps): Update bufbuild/buf-setup-action action to v1.32.1 ( [#2164](https://github.com/cerbos/cerbos/pull/2164 "")) • [c1c49f7](https://github.com/cerbos/cerbos/commit/c1c49f738982c693a1bd5ea3e4a6564de1c91781 "") chore(deps): Update bufbuild/buf-setup-action action to v1.32.2 ( [#2170](https://github.com/cerbos/cerbos/pull/2170 "")) • [bea6ccc](https://github.com/cerbos/cerbos/commit/bea6cccbc5f6241205d68471fb363e0184b1c84d "") chore(deps): Update bufbuild/buf-setup-action action to v1.33.0 ( [#2188](https://github.com/cerbos/cerbos/pull/2188 "")) • [b6d97dd](https://github.com/cerbos/cerbos/commit/b6d97ddb5fb4a7b51f460ada1b2e7f031b44904e "") chore(deps): Update go deps ( [#2147](https://github.com/cerbos/cerbos/pull/2147 "")) • [99c09ef](https://github.com/cerbos/cerbos/commit/99c09ef63d986fa1d5b156c54fe3f96aa4449734 "") chore(deps): Update go deps ( [#2165](https://github.com/cerbos/cerbos/pull/2165 "")) • [d38b920](https://github.com/cerbos/cerbos/commit/d38b920530743567ce58f69a3226605fac7877b8 "") chore(deps): Update go deps ( [#2171](https://github.com/cerbos/cerbos/pull/2171 "")) • [a059dd3](https://github.com/cerbos/cerbos/commit/a059dd392900abb28168fa921cb801b5d6a65b7a "") chore(deps): Update go deps ( [#2181](https://github.com/cerbos/cerbos/pull/2181 "")) • [85c4161](https://github.com/cerbos/cerbos/commit/85c416159e546d2a47799e391456ac25edddc7ac "") chore(deps): Update go deps ( [#2187](https://github.com/cerbos/cerbos/pull/2187 "")) • [2b69f59](https://github.com/cerbos/cerbos/commit/2b69f59fa451ca82b3ca8550312798d71e221ad2 "") chore(deps): Update go deps to v2 (major) ( [#2167](https://github.com/cerbos/cerbos/pull/2167 "")) • [f55a92e](https://github.com/cerbos/cerbos/commit/f55a92e795070899b7b9fd2892039f3a119b0212 "") chore(deps): Update golangci/golangci-lint-action action to v6 ( [#2173](https://github.com/cerbos/cerbos/pull/2173 "")) • [cc94282](https://github.com/cerbos/cerbos/commit/cc94282b285ca9ee6fa25e0f764ea36f3d138716 "") chore(deps): Update node.js deps ( [#2148](https://github.com/cerbos/cerbos/pull/2148 "")) • [be936f2](https://github.com/cerbos/cerbos/commit/be936f24668bfe97169d21ab34861e7f0cb2f412 "") chore(deps): Update node.js deps ( [#2166](https://github.com/cerbos/cerbos/pull/2166 "")) • [c5dc261](https://github.com/cerbos/cerbos/commit/c5dc261279f95d3d334d70fde0382641415f9e56 "") chore(deps): Update node.js deps ( [#2172](https://github.com/cerbos/cerbos/pull/2172 "")) • [32e6336](https://github.com/cerbos/cerbos/commit/32e633658c9adfa08867dc6095edec6f2f9c7164 "") chore(deps): Update node.js deps ( [#2182](https://github.com/cerbos/cerbos/pull/2182 "")) • [10b0f0c](https://github.com/cerbos/cerbos/commit/10b0f0c8c073310b5c291b6cd613bc80f22c8c22 "") chore(docs): Redirect old versions with correct status code ( [#2168](https://github.com/cerbos/cerbos/pull/2168 "")) • [ae7cfca](https://github.com/cerbos/cerbos/commit/ae7cfcaf726d7fe99b5243a32b4f462dc65707f4 "") chore(release): Add 0.37.0 release notes ( [#2189](https://github.com/cerbos/cerbos/pull/2189 "")) • [bf41e87](https://github.com/cerbos/cerbos/commit/bf41e876bb0e81688964e9c901ac898faa25ac8e "") chore(release): Prepare release 0.37.0 • [c1c4049](https://github.com/cerbos/cerbos/commit/c1c4049cb4aa61859f4ce59ac9046267b3c4725d "") chore(version): Bump version to 0.37.0 • [a1a7010](https://github.com/cerbos/cerbos/commit/a1a7010a1879313a02481de0b65e6f54ad1c5455 "") chore: Migrate to Buf configuration v2 ( [#2180](https://github.com/cerbos/cerbos/pull/2180 "")) • [7fdc055](https://github.com/cerbos/cerbos/commit/7fdc055b5ebeb3725af5a47fcb8d5d124d68ea23 "") chore: Remove workaround for fixed gRPC-Gateway bug in ``` X-Forwarded-For ``` handling ( [#2157](https://github.com/cerbos/cerbos/pull/2157 "")) • [1a25664](https://github.com/cerbos/cerbos/commit/1a256644968126ddb132ab9c009cd83bbe99e19c "") chore: Update error message for invalid expression (! 💻 🔉 Join us for a live webinar: “ [Business Case for Externalized Authorization](https://zoom.us/webinar/register/7717151049723/WN_TZfKO-0xRcWdhI0Rw7c-lw "")”! 📅 Date: June 24th ⏰ Time: 5pm CEST / 11am ET 📍 Duration: 45 minutes (including a 15 min Q&A) As businesses grow, managing user permissions becomes a maze of complexity, often leading to security risks and inefficiencies. In this session, we’ll dive deep into the challenges and solutions for robust authorization within a scaling business. 👥 Speakers: • [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), Cerbos CPO & Co-Founder: Expert in enterprise solutions, authorization, data management, and security. Previous roles at Microsoft, Qubit, and various startups. • [Daniel Maher](https://www.linkedin.com/in/dan-phrawzty-maher/ ""), Cerbos Sr DevRel Manager: Seasoned systems engineer and DevOps advocate with a rich background at Ubisoft, Mozilla, and Datadog. 🎯 What you’ll learn: 1\. The internal drivers for robust authorization: compliance mandates, user role management, and secure access controls. 2\. The emerging concept of external authorization: decoupling access control logic from applications for a scalable and flexible solution. 3\. How external authorization can streamline operations, enhance security, and support compliance, providing a robust foundation for sustainable growth. There will also be a live Q&A session to engage directly with our experts! ⏺️ Can’t make it live? Register anyway to receive the recording link in your inbox. 👉\* [Register here](https://zoom.us/webinar/register/7717151049723/WN_TZfKO-0xRcWdhI0Rw7c-lw "")\\* 👈 cerbie 9 👀 3 🚀 4 👌 1 👏 1 🙌 8 💡 5 👏🏻 1 a Anna Paykina 06/24/2024, 5:14 AM happy Monday, everyone! 🚨 There’s only a few hours left until our “Business Case for Externalized Authorization” webinar! Don’t miss out! 😊 Join us today, June 24th, at 5pm CEST / 11am ET to discover how to manage roles and permissions, streamline security, and scale your business effectively. 🔵 [Register here](https://zoom.us/webinar/register/7717151049723/WN_TZfKO-0xRcWdhI0Rw7c-lw "") 🔵 PS. Can’t make it live? No worries! Register anyway to receive the recording in your inbox. 🙌 1 cerbie 4 📣 5 a Anna Paykina 06/25/2024, 4:10 AM Hey everyone! We have some more exciting news - **Cerbos PDP v0.37.0** is now live 🚀 The v0.37 release of Cerbos PDP adds support for autocomplete when using the Cerbos REPL, new Kubernetes deployment options and updates to the AdminAPI. You can check out a [summary blog post here](/content/blog/cerbos-pdp-v-0-37-0-release-highlights-repl-autocomplete-kubernetes-daemon-set-and-more ""/index.html). To discover all the details & [view the full release notes, click here](https://docs.cerbos.dev/cerbos/latest/releases/v0.37.0.html?_gl=1*1r5acap*_gcl_au*NzgxMjc0ODc1LjE3MTMxNzg1MjY.*_ga*MTk1NjcwNzQ1MC4xNjY2Mjc5NjI2*_ga_8G3G3MS838*MTcxOTMwMjQ3Ny4xMDYwLjEuMTcxOTMwMjg3My42MC4wLjA. "") 👈 🚀 4 💫 2 cerbie 3 🙌 3 a Anna Paykina 06/25/2024, 5:03 AM And here are some more news for today 😊cerbie We’re thrilled to share [part 2 of our collaborative series with Microsoft](/content/blog/navigating-authentication-and-authorization-harnessing-the-power-of-microsoft-entra-external-id-and-cerbos-for-enhanced-application-security ""/index.html)! 🔒 This guide, co-authored by Martin Gjoshevski, Senior Customer Engineer at Microsoft, and Alex Olivier (Cerbos), CPO and Co-Founder at Cerbos, simplifies the complexities of integrating Microsoft Entra External ID with Cerbos to ensure your applications are not only secure but also adhere to best practices in user management and access control. 👉 Here’s what you’ll learn: 1\. Setup and configuration: Step-by-step instructions on setting up an External ID tenant and registering your application. 2\. User flow and permissions: Insights on creating user flows for sign-in/sign-up processes and managing permissions effectively. 3\. Implementing Cerbos for authorization: Techniques to define and enforce dynamic access controls. 4\. Practical integration: Real code samples and a comprehensive tutorial to empower you to implement these strategies in your projects. 🌐 [Read the full blog here](/content/blog/navigating-authentication-and-authorization-harnessing-the-power-of-microsoft-entra-external-id-and-cerbos-for-enhanced-application-security ""/index.html) 🔜 Looking ahead: Don’t miss our upcoming third piece of the series, where we explore advanced features of Microsoft Entra External ID and Cerbos for managing SaaS users and enhancing security postures. 🚀 5 🌟 4 cerbos 4 🙌 2 👀 2 🔐 2 h Heidi Hokanson 06/27/2024, 11:58 AM Hi All. Cerbos is sponsoring [We are Developers World Congress](https://www.wearedevelopers.com/world-congress "") this year and that means we get to give out discount codes for tickets! 🤑 The event is in **Berlin, July 17-19**. Use our discount code, **WWC24\_CERBOS\_FRIENDS** for 15% off. **@Sam Lock (Cerbos)**, **@Andrew Haines (Cerbos)**, **@Alex Olivier (Cerbos)**, and **@Emre (Cerbos)** will be at **booth A46.** Stop by and say hi if you're in the area! We will have some goodies for you to say thanks for being part of our community. 💛 🇩🇪 7 ✈️ 4 cerbos 5 🎉 5 🙌 3 🚀 2 👀 3 👏 3 🤓 2 a Anna Paykina 07/09/2024, 10:30 AM 😊 Hey ! 📰 **Our [July newsletter](https://cerbos-20289770.hs-sites.com/cerbos-july-2024-update "") is out, and we wanted to share the highlights with you.** Since our last update, we’ve released **[Cerbos PDP v0.37.0](/content/blog/cerbos-pdp-v-0-37-0-release-highlights-repl-autocomplete-kubernetes-daemon-set-and-more?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_NuUb9XwXE5Objmm0VwOywgCf_PgU2HJtBxT5pYrSxlwRnhewxI7J3HrK9CcRNFLTNBtPc ""/index.html)**, and introduced a guide which helps users navigate authentication and authorization using **[Microsoft Entra External ID and Cerbos.](/content/blog/navigating-authentication-and-authorization-harnessing-the-power-of-microsoft-entra-external-id-and-cerbos-for-enhanced-application-security?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_NuUb9XwXE5Objmm0VwOywgCf_PgU2HJtBxT5pYrSxlwRnhewxI7J3HrK9CcRNFLTNBtPc ""/index.html)** We have also published a blog post in which we examine the **[differences between authentication and authorization](/content/blog/authentication-vs-authorization-understanding-the-difference?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_NuUb9XwXE5Objmm0VwOywgCf_PgU2HJtBxT5pYrSxlwRnhewxI7J3HrK9CcRNFLTNBtPc ""/index.html)**, and how they work together to secure applications. **If you’d like to be the first to receive Cerbos updates, you can [subscribe to our newsletter here](/content/subscribe ""/index.html).** 💡 4 cerbie 5 👀 1 🙌 2 📰 1 💾 1 a Anna Paykina 07/10/2024, 9:53 AM , hello everyone! We’ve just released a blog post (which includes a demo video), showcasing the new Cerbos Dagger module 🙌 Discover how it simplifies authorization testing, integrates with CI pipelines, and enhances security. ➡️ [Check out the blog post and watch the demo](/content/blog/cerbos-dagger-module-for-authorization-testing ""/index.html) ⬅️ 🤝 3 cerbie 5 🗡️ 3 🙌 5 🙌🏻 1 d - 2 - 1 a Anna Paykina 07/18/2024, 8:14 AM 🎉 **We are thrilled to announce that Cerbos Hub has successfully transitioned from Beta to General Availability!** cerbie A huge thank you to our community for your support, and to 500+ organizations that have put their trust into Cerbos Hub! You have been instrumental in reaching this milestone. We look forward to continuing this journey with you! 👉 [What Cerbos Hub is, why it's useful & how it solves some of the hardest challenges with externalizing authorization](/content/news/cerbos-hub-is-now-generally-available ""/index.html) 👈 🚀 [Try Cerbos Hub](https://hub.cerbos.cloud/ "") 🚀 💫 4 cerbos 5 💥 4 🚀 12 🎉 7 🌟 5 cerbie 5 👏 1 🙌 1 a Anna Paykina 07/23/2024, 7:50 AM happy Tuesday, everyone! We’ve published a new blog that dives into the essentials of implementing Role-Based Access Control in JavaScript 💡 Here’s what you’ll learn 1) Integrating RBAC: Add robust authorization to your JS apps. 2) Using Cerbos: Implement fine-grained access control with ease. 3) Best Practices: Follow key guidelines for secure and scalable RBAC policies. And why the piece could be worth your time 🔑 1) Enhanced security: Protect sensitive data with precise access control. 2) Scalability: Seamlessly manage growing user bases. 3) Efficiency: Simplify role management and policy enforcement. 👉 [Curious? Dive into the full blog + tutorial](/content/blog/role-based-access-control-in-javascript ""/index.html) 💻 3 🙌 6 cerbie 6 💡 7 a Anna Paykina 07/24/2024, 9:27 AM hey, community! As well as celebrating the launch of Cerbos Hub going GA last week, we have also been busy working away adding many requested features from our users 🚀 These include: 🔵 Selective policies compilation for Embedded PDP 🔵 Detailed build errors 🔵 Playground templates 🔵 User profile management [You can learn more here](/content/blog/cerbos-hub-july-product-updates ""/index.html) cerbie 7 🌟 4 💪 3 💥 1 a Anna Paykina 07/31/2024, 7:54 AM Hello, Cerbos community! Cerbos’ CEO and Co-Founder, [Emre Baran](https://www.linkedin.com/in/emrebaran/ ""), recently appeared on 🎙️ The Cloud Gambit podcast to share his journey from co-founding Yonja, Turkey’s largest social network, to leading Cerbos. This episode would be relevant for those of you interested in hearing about scaling successful startups, tech innovation, and the strategic decisions behind Cerbos. 👉 [You can check out the full blog post and listen to the podcast episode here](/content/news/the-cloud-gambit-podcast-cerbos-ceo-emre-baran-talks-startup-growth-and-shares-cerbos-insights ""/index.html) Have a great rest of your day! 💪 🙌 3 🙌🏼 1 👏 4 🗣️ 1 cerbie 2 cerbos 2 a Anna Paykina 08/06/2024, 7:32 AM hey, everyone! 😊 Understanding the **difference between 401 Unauthorized and 403 Forbidden errors** is crucial for developers and security experts. 📚 Which is why we put together a blog post on this topic, where you can learn: • The distinct causes behind each error. • How to troubleshoot and resolve these common issues. • Best practices to avoid these errors in your applications. 👉 [https://www.cerbos.dev/blog/401-vs-403-error-whats-the-difference](/content/blog/401-vs-403-error-whats-the-difference ""/index.html) 👈 🌟 6 💡 8 🐛 3 💪 6 j - 2 - 2 a Anna Paykina 08/06/2024, 10:30 AM Some more news to share with you all 🙂 📰\* [Our monthly newsletter](https://cerbos-20289770.hs-sites.com/cerbos-august-2024-update "")\\* went out earlier today! Here’s what we covered in there: • **[Cerbos Hub being released into general availability](/content/news/cerbos-hub-is-now-generally-available?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)**. • New **[features added to Cerbos Hub](/content/blog/cerbos-hub-july-product-updates?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)** • **[Cerbos Dagger module](/content/blog/cerbos-dagger-module-for-authorization-testing?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)** for authorization testing • Guides on implementing **[role-based access control in JavaScript](/content/blog/role-based-access-control-in-javascript?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)** and **[authorization in Gorilla applications](/content/blog/gorilla-authorization?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)** • Steps to reducing risks associated with **[authorization failure](/content/news/decrease-the-cost-of-failure-in-authorization?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)** • Our Co-Founder and CEO, Emre Baran, on **[The Cloud Gambit podcast](/content/news/the-cloud-gambit-podcast-cerbos-ceo-emre-baran-talks-startup-growth-and-shares-cerbos-insights?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_WL6qLSturbkN9a0xz624ywAMsbJ4ufsPS2uw1uX6BGoVW8c6D5g4nnplj653n1Lob09QVbEcwgjHrI_1UC8_1IxXpSSeAdvcPw9xY6Xrf5mDYf_M ""/index.html)**, sharing his experience building and scaling successful startups You can always [subscribe to our newsletter](/content/subscribe ""/index.html) to get future updates as soon as they come out 💡 4 🌟 6 cerbie 6 🪶 2 🚀 3 GitHub 08/07/2024, 4:13 AM [Release - v0.38.1](https://github.com/cerbos/cerbos/releases/tag/v0.38.1 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.38.1** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.38.1.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.38.1.html "") **Changelog** **Chores** • [3284851](https://github.com/cerbos/cerbos/commit/3284851b36af8937f67627ed8835119478f0350d "") chore(ci): Remove AWS dev and latest container tags ( [#2256](https://github.com/cerbos/cerbos/pull/2256 "")) • [87cda73](https://github.com/cerbos/cerbos/commit/87cda73e2d7cf6c3886c2cac0f726e3de81c9095 "") chore(release): Add 0.38.1 release notes ( [#2257](https://github.com/cerbos/cerbos/pull/2257 "")) • [a56ff6b](https://github.com/cerbos/cerbos/commit/a56ff6b35963647c6aecf7217a08e101418d99f3 "") chore(release): Prepare release 0.38.1 • [d124b93](https://github.com/cerbos/cerbos/commit/d124b93053aa1fbae24054e97d502683c4e776ee "") chore(version): Bump version to 0.39.0 [cerbos/cerbos](https://github.com/cerbos/cerbos "") 💾 1 a Anna Paykina 08/08/2024, 11:29 AM Happy Thursday, Cerbos community! We hope you all are having a great week ☀️💪 We wanted to let you know that **Cerbos PDP v0.38.1 has been released** [If you’re interested, you can check out the details here](/content/blog/cerbos-pdp-v0-38-1-release-highlights-policy-variables-sbom-support-improved-error-messages-and-helm-updates ""/index.html) 🙌 3 cerbie 4 🚀 3 cerbos 2 🎁 1 a Anna Paykina 08/30/2024, 9:50 AM Hey, ! 😊👋 We wanted to let you know that, [Alex Olivier](https://www.linkedin.com/in/alexolivier/ "") recently sat down with Twain Taylor on the Amazic Podcast to talk about what’s new at Cerbos, especially after the [GA launch of Cerbos Hub](/content/news/cerbos-hub-is-now-generally-available ""/index.html). They dug into some real-world challenges around authorization—how to manage policies at scale, what’s happening with standardization in the space, and even a bit about our journey from idea to product. We’ve summarized the key takeaways in a new blog post. If you’re interested - give it a read and check out the full episode for even more details. 👉 [https://www.cerbos.dev/news/unveiling-the-future-of-authorization-with-cerbos](/content/news/unveiling-the-future-of-authorization-with-cerbos ""/index.html) 🙌 3 💫 1 💥 2 🌟 3 cerbie 6 💯 5 cerbos 1 a Anna Paykina 09/03/2024, 8:44 AM Hey ! **We’re happy to announce that [Cerbos Hub Audit Logs are live in beta!](/content/blog/cerbos-hub-audit-logs-live-in-beta ""/index.html)** 🎉 Cerbos Hub Audit Logs offer a comprehensive, centralized solution for capturing and analyzing authorization decisions across all your PDP instances. Whether you’re a developer, security engineer, or product manager, **this feature will make security and compliance easier to achieve.** 👉 By configuring your PDPs to [send audit logs to Cerbos Hub](https://docs.cerbos.dev/cerbos-hub/audit-log-collection ""), you get an immediate log aggregation to securely collect, store, and query audit logs from across your fleet. • Are you looking for a simple way to manage and analyze your audit logs? Every request, every decision, every bit of metadata—and all of this is fully customized for your needs! • Are you only interested in denies? You got it. • Are you in a regulated environment and you need to mask certain fields? Not a problem. And, since everything is natively Cerbos, the audit logs interface in Hub takes full advantage of the context of each log entry. This means you can deep dive into _every decision_ to understand why it was made, and even which version of the policy was active at the time. If you’d like to learn more - check out our latest blog post for all the details and start exploring the potential of Cerbos Hub today. We’d love for you to try it out and share your feedback with us! 😊 [Read the blog post](/content/blog/cerbos-hub-audit-logs-live-in-beta ""/index.html) [Try Cerbos Hub](/content/product-cerbos-hub ""/index.html) Happy logging! 🙌 🙌 5 cerbie 5 🎉 3 🌟 3 🚀 5 🪵 4 a Anna Paykina 09/04/2024, 8:03 AM Hey everyone! Here’s some more fun news 🙂 ⬇️ We have a new blog post out, discussing the best solution for user authorization: PBAC vs. Zanzibar Option 1️⃣ PBAC with Cerbos: Flexible, scalable, and stateless – ideal for real-time access control decisions. Option 2️⃣ Zanzibar: Centralized, fine-grained control for static, high-volume resources. 👉 [Check out the full blog to learn more](/content/blog/pbac-vs-zanzibar-finding-the-right-fit-for-your-application ""/index.html) 👈 cerbie 3 🚀 2 💡 6 🙌 3 cerbos 3 GitHub 10/01/2024, 3:08 AM [Release - v0.39.0](https://github.com/cerbos/cerbos/releases/tag/v0.39.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.39.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.39.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.39.0.html "") **Changelog** **Features** • [2dcf619](https://github.com/cerbos/cerbos/commit/2dcf619ba2dc333965101df9f54aa77d45da1570 "") feat: Add Role policies ( [#2192](https://github.com/cerbos/cerbos/pull/2192 "")) ( [#2260](https://github.com/cerbos/cerbos/pull/2260 "")) • [7bd0a2d](https://github.com/cerbos/cerbos/commit/7bd0a2db7bf342352bd991cad31525b12c38ee0a "") feat: Add public API for running a PDP in-process ( [#2297](https://github.com/cerbos/cerbos/pull/2297 "")) **Enhancements** • [8bcd411](https://github.com/cerbos/cerbos/commit/8bcd411011d109b96a687d58f545c1ec155367db "") enhancement: Add more trace spans to engine ( [#2324](https://github.com/cerbos/cerbos/pull/2324 "")) • [e2da55c](https://github.com/cerbos/cerbos/commit/e2da55cc8e4d3c4276493853f43418ac8ed7f241 "") enhancement: Atomic refreshes for blob storage ( [#2263](https://github.com/cerbos/cerbos/pull/2263 "")) • [7add5fe](https://github.com/cerbos/cerbos/commit/7add5fe96c7bc243bf34218ba98ef9710374b790 "") enhancement: Change how blob storage creates work directories and add metric for the last store refresh ( [#2284](https://github.com/cerbos/cerbos/pull/2284 "")) • [1f532ca](https://github.com/cerbos/cerbos/commit/1f532cad087c8d7d3fc1d639c654e0d39d548c14 "") enhancement: Display attributes in the cerbosctl inspect policies command ( [#2301](https://github.com/cerbos/cerbos/pull/2301 "")) • [f4afc44](https://github.com/cerbos/cerbos/commit/f4afc44ff78ccf8b39c84240d0d4241579d3d6f0 "") enhancement: Get/put cerbosctl role policy support ( [#2274](https://github.com/cerbos/cerbos/pull/2274 "")) • [259eeb0](https://github.com/cerbos/cerbos/commit/259eeb01ee0e0d867f081c1bc49713cee7f4cd75 "") enhancement: Improvements to atomic refreshes for blob storage ( [#2283](https://github.com/cerbos/cerbos/pull/2283 "")) • [4a9830c](https://github.com/cerbos/cerbos/commit/4a9830cfc9f16ca1ffa24c3f5106df2efb321122 "") enhancement: Keep cached files under base64 encoded directory for blob storage ( [#2292](https://github.com/cerbos/cerbos/pull/2292 "")) • [25bd4c2](https://github.com/cerbos/cerbos/commit/25bd4c2ce10f88611ae12ac93c9952822cedd811 "") enhancement: Remove eager log initialisation from schema validation ( [#2287](https://github.com/cerbos/cerbos/pull/2287 "")) **Bug fixes** • [3ac50c4](https://github.com/cerbos/cerbos/commit/3ac50c41bf9e9ad7855f979e7bc54a5ced7592b8 "") fix(docs): Update Helm doc ( [#2278](https://github.com/cerbos/cerbos/pull/2278 "")) • [670b3fe](https://github.com/cerbos/cerbos/commit/670b3fe2404d16a42afcbb59182ee4bd00963fff "") fix(helm): Allow overriding listen addresses ( [#2289](https://github.com/cerbos/cerbos/pull/2289 "")) • [86cf020](https://github.com/cerbos/cerbos/commit/86cf020b0bdf00bc328bc12158cb89db50716804 "") fix(helm): Fix schema definition of initContainers ( [#2305](https://github.com/cerbos/cerbos/pull/2305 "")) • [955a0c4](https://github.com/cerbos/cerbos/commit/955a0c4c6e19781a004d48e2e1bd8628b2bffea2 "") fix(schema): Support TLS with reverse proxy ( [#2300](https://github.com/cerbos/cerbos/pull/2300 "")) • [f901abd](https://github.com/cerbos/cerbos/commit/f901abd4340e756dadc006d5efea5d7e4c32f6e4 "") fix: Move runtime role policy proto scope level ( [#2321](https://github.com/cerbos/cerbos/pull/2321 "")) **Documentation** • [bfbef28](https://github.com/cerbos/cerbos/commit/bfbef2830b6edb9dc6eb12518e2f06d338171ba6 "") docs: Add role policies sections ( [#2253](https://github.com/cerbos/cerbos/pull/2253 "")) ( [#2261](https://github.com/cerbos/cerbos/pull/2261 "")) • [05917f2](https://github.com/cerbos/cerbos/commit/05917f2d04b6dab0fed6e4755ecc4197c2ee855a "") docs: Document the Cerbos Nix flake ( [#2309](https://github.com/cerbos/cerbos/pull/2309 "")) • [28902c6](https://github.com/cerbos/cerbos/commit/28902c670d1f7a41e2957b1d8108ed59e55dd486 "") docs: Fix missing default value for ``` storage.hub.remote.disableAutoUpdate ``` ( [#2298](https://github.com/cerbos/cerbos/pull/2298 "")) • [335a8f2](https://github.com/cerbos/cerbos/commit/335a8f289ad7e455f459182134cd61686cbd6f85 "") docs: Spell Datadog properly ( [#2270](https://github.com/cerbos/cerbos/pull/2270 "")) **Chores** • [494db09](https://github.com/cerbos/cerbos/commit/494db091ba6f9ace3a84c7f035e5c6e390f3c06f "") chore(ci): Clear disk space for cache workflow ( [#2268](https://github.com/cerbos/cerbos/pull/2268 "")) • [4291df1](https://github.com/cerbos/cerbos/commit/4291df1479037a2879e2d4aef88e16822d727b15 "") chore(ci): Clear disk space for upload workflow ( [#2269](https://github.com/cerbos/cerbos/pull/2269 "")) • [943078e](https://github.com/cerbos/cerbos/commit/943078e39797f48ebe5856c3cb97278012b2d073 "") chore(ci): Clear disk space for vulnerability check ( [#2271](https://github.com/cerbos/cerbos/pull/2271 "")) • [95a39cb](https://github.com/cerbos/cerbos/commit/95a39cb86012e2d4497c82a82741f1b3df5128cb "") chore(ci): Clear disk space on PR run ( [#2266](https://github.com/cerbos/cerbos/pull/2266 "")) • [07d83f6](https://github.com/cerbos/cerbos/commit/07d83f6b7ecdfb5f150c71fbcd25abcd18c8422a "") chore(ci): Set SQL Server image pull policy for E2E tests ( [#2304](https://github.com/cerbos/cerbos/pull/2304 "")) • [607d08c](https://github.com/cerbos/cerbos/commit/607d08c0c66c7252831500a46a7f32a89c13396d "") chore(ci): Trust SQL Server certificate ( [#2307](https://github.com/cerbos/cerbos/pull/2307 "")) • [6fb7cf8](https://github.com/cerbos/cerbos/commit/6fb7cf8754c94bf29965d4fb3dd7f412960be03b "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 27.1.0+incompatible to 27.1.1+incompatible in /tools ( [#2277](https://github.com/cerbos/cerbos/pull/2277 "")) • [cdd71fe](https://github.com/cerbos/cerbos/commit/cdd71fed0378ab55cf97d6f6c120bc470f1858b1 "") chore(deps): Bump [github.com/opencontainers/runc](http://github.com/opencontainers/runc "") from 1.1.13 to 1.1.14 ( [#2306](https://github.com/cerbos/cerbos/pull/2306 "")) • [7bdbbe7](https://github.com/cerbos/cerbos/commit/7bdbbe7be8bca7bc789f03c8711316caec87614d "") chore(deps): Update bufbuild/buf-setup-action action to v1.37.0 ( [#2286](https://github.com/cerbos/cerbos/pull/2286 "")) • [fd8f19f](https://github.com/cerbos/cerbos/commit/fd8f19f3d4639ff41eedc77504427206fe9fe4a1 "") chore(deps): Update bufbuild/buf-setup-action action to v1.38.0 ( [#2296](https://github.com/cerbos/cerbos/pull/2296 "")) • [07fec41](https://github.com/cerbos/cerbos/commit/07fec410c5a437f73dc2547047bf5719ad93150d "") chore(deps): Update bufbuild/buf-setup-action action to v1.39.0 ( [#2302](https://github.com/cerbos/cerbos/pull/2302 "")) • [bc56290](https://github.com/cerbos/cerbos/commit/bc56290870931ca642c441a368c29924c8932604 "") chore(deps): Update bufbuild/buf-setup-action action to v1.41.0 ( [#2311](https://github.com/cerbos/cerbos/pull/2311 "")) • [9b307d2](https://github.com/cerbos/cerbos/commit/9b307d22b9c662838bd19c8865046cc612679b93 "") chore(deps): Update bufbuild/buf-setup-action action to v1.42.0 ( [#2320](https://github.com/cerbos/cerbos/pull/2320 "")) • [6c10a02](https://github.com/cerbos/cerbos/commit/6c10a02413bbce0ccd6a5e76ce461d2ee526d65f "") chore(deps): Update github actions deps ( [#2275](https://github.com/cerbos/cerbos/pull/2275 "")) • [21c5bc6](https://github.com/cerbos/cerbos/commit/21c5bc6141782107a549ff22d66598dce9cb9ed3 "") chore(deps): Update go deps ( [#2276](https://github.com/cerbos/cerbos/pull/2276 "")) • [5508335](https://github.com/cerbos/cerbos/commit/55083355e8e24c9be4f65732a578d6fda5d696c9 "") chore(deps): Update go deps ( [#2285](https://github.com/cerbos/cerbos/pull/2285 "")) • [ba7bad9](https://github.com/cerbos/cerbos/commit/ba7bad9899ee36d3bf1b212dedcda0980234806c "") chore(deps): Update go deps ( [#2295](https://github.com/cerbos/cerbos/pull/2295 "")) • [2481b79](https://github.com/cerbos/cerbos/commit/2481b795a2321ecaef2f17359006c5696d7f6cb4 "") chore(deps): Update go deps ( [#2303](https://github.com/cerbos/cerbos/pull/2303 "")) • [0b79e26](https://github.com/cerbos/cerbos/commit/0b79e2604b08d285bce83f197d346f66940e490c "") chore(deps): Update go deps ( [#2310](https://github.com/cerbos/cerbos/pull/2310 "")) • ** 👋 Some new features have just landed in **Cerbos Hub Playground**! These features are designed to help speed up your workflow and improve your testing experience. ⚡ **RBAC Policy Generator**: This public playground feature is now available in your Hub playgrounds. Define RBAC policies using a no-code wizard that automatically populates your Playground with YAML policies and generates test data for them. ⚡ **API Request Simulator**: Also a public playground feature migrating to Hub that you can use for debugging and understanding how your policies work in real-world scenarios. ⚡️ **Connect a PDP -** **Exclusive to Cerbos Hub:** Connect a local PDP in a development environment to the Playground and see real-time results as you work. No need to download files or reconfigure the PDP for each change. **Links to more information:** 🔗 📺 Video demo of each new feature▾ by **@Alex Olivier (Cerbos)** 📰 [Our new feature announcement on the Cerbos Blog](/content/news/new-tools-for-effortless-policy-creation-and-testing-in-cerbos-hub ""/index.html). 📖 [Updated documentation for the Cerbos Hub Playground](https://docs.cerbos.dev/cerbos-hub/playground ""). Jump into Cerbos Hub and give these new features a try! As always, feel free to share your feedback or ask any questions here—we’re excited to hear what you think. 🎉 7 cerbos 5 🌟 5 👍 5 🙌 5 🚀 4 cerbie 3 🥳 1 a Anna Paykina 10/09/2024, 6:42 AM Hey, Cerbos community 😊 📰\* [Our monthly newsletter](https://cerbos-20289770.hs-sites.com/cerbos-october-2024-update "")\\* went out earlier this week! Here’s what we covered in there: • New features in the [Cerbos Hub Playground](/content/news/new-tools-for-effortless-policy-creation-and-testing-in-cerbos-hub ""/index.html) are now available • [Cerbos PDP v0.39.0](https://docs.cerbos.dev/cerbos/latest/releases/v0.39.0 "") has gone live • Guide to help you implement [externalized authorization](/content/blog/the-technical-complexities-of-externalized-authorization ""/index.html) in the right way • [Zero trust authorization](/content/blog/zero-trust-authorization ""/index.html) and its importance in app security • Emre Baran on the [Front End Happy Hour podcast](/content/news/front-end-happy-hour-podcast-leadership-startups-and-gtm-with-emre-baran?utm_campaign=monthly%20newsletters&utm_source=hs_email&utm_medium=email&_hsenc=p2ANqtz-_W2He5v8bcbxV00EKG__YRRl59ctFCnlKUEeuZE6Al2MUrpVNSxLF7MaiWIs2SIGVx7IRmWncatCT-EQX_nDdbRfdSJfy2W96dpRa1LIaAibkeHZw ""/index.html), discussing the realities of scaling a business _PS. You can always [subscribe to our newsletter](/content/subscribe ""/index.html) to get future updates as soon as they come out_ cerbie 6 🎉 4 🙌 4 🚀 4 cerbos 2 d Daniel Maher 10/09/2024, 10:18 AM 👋 Hi @channel! My name is Dan, and I’m one of the engineering folks here at Cerbos. As you might have noticed in the [monthly newsletter](https://cerbos-20289770.hs-sites.com/cerbos-october-2024-update "") that just went out, we’ve got lots of fun and interesting things planned for our Slack community, and I’m genuinely excited to get things started. Very briefly, our calendar kicks off on 16 October with a Policy Chillout livestream, followed on 22 October with an open source Q&A, and then an interactive presentation about stateless architecture on 30 October. Lots of stuff to come, including AMAs, hack sessions, and more! I’ve posted way more details in **#C028A53GAJE**. Really looking forward to meeting you all! 😄 cerbie 7 🙌 2 a Anna Paykina 10/15/2024, 6:43 AM Hey, ! 😊👋 We just published a new blog post explaining: • What authorization is, and why it’s a key component of secure systems. • Different models, like Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and more. • Why understanding these concepts is crucial for building secure, scalable applications that balance flexibility and protection. 👉 [Check out the piece to learn more](/content/blog/what-is-authorization ""/index.html) 👈 💡 3 🙌 4 👍 3 🔒 1 a Anna Paykina 10/15/2024, 1:28 PM Some more exciting news 💫 Join our “Policy Chillout” livestream on 16 October at 14:00 UTC 🧑‍💻🛠️ Hang out with the Cerbos engineers as we talk shop, write policies, and dive into test cases. We’d love for you to bring your design questions—or just enjoy the vibes and relax with a nice mug of YAML 😉 👉 Watch live: [https://www.youtube.com/live/6A7Wa5exC3Y](https://www.youtube.com/live/6A7Wa5exC3Y "") 🎉 8 💡 5 😊 5 👌 1 a Anna Paykina 10/22/2024, 11:00 AM hey :)) If you want to get more involved in open source, but you’re not sure where to start ➡️ Join us today, 22 October at 17:00 UTC, for our livestream “Everything you wanted to know about Open Source” 📅 We’ll cover what open source is, how to get started, and tips for staying healthy as an OSS contributor or maintainer. 👉 Watch live: [https://lnkd.in/dhmJ7igM](https://lnkd.in/dhmJ7igM "") 👉 Ask questions in Slack See you in 2 hour! 💡 4 cerbie 3 😊 2 🌟 2 💾 2 cerbos 1 a Anna Paykina 10/23/2024, 5:51 AM Happy Wednesday, ! We have a fun **livestream** coping up later today, featuring our CPO, [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), which we wanted to share with you 😊 📅 Date: October 23, 6pm CEST / 12pm EDT 🔍 Topic: Beyond the black box - implementing robust authorization in RAG-based AI systems As more companies adopt AI agents with RAG architectures, a key security challenge arises: how to effectively implement and manage authorization within these complex systems? This talk explores the intricacies of overlaying authorization logic on AI agents, particularly within RAG architectures, and presents a context-aware solution using externalized authorization. 📍 [Register here](http://community.cncf.io/e/m4eu4f/ "") _PS. you can’t attend live - no worries. The recording will be available_ 😊 🌟 4 📹 4 cerbie 5 🤖 1 a Anna Paykina 10/23/2024, 6:14 AM And in others news, we’ve also recently published a guide, where we demonstrate how to implement authorization using Cerbos in Go (Echo) 💻 By the end of the guide, you’ll know how to set up a secure RESTful API in Go and enforce access control policies using Cerbos. 👉 [You can check it out here](/content/blog/how-to-implement-authorization-in-go ""/index.html) 👈 cerbie 6 🙌 3 🚀 1 a Anna Paykina 10/24/2024, 12:40 PM Hey, ! 👋 We just published a guide on using **Cerbos with JWT**! 💻 💡 ➡️ [Feel free to check it out](/content/blog/json-web-tokens-authorization-cerbos?utm_campaign=brand_cerbos&utm_source=linkedin&utm_medium=social&utm_content=&utm_term= ""/index.html) ⬅️ 😊 3 cerbos 6 🙌 4 👀 2 a Anna Paykina 10/30/2024, 6:39 AM Hey ! Happy Wednesday :)) 🙌 We’re excited to invite you to our new live stream today on stateless architecture and microservices — it’s happening at 5 pm UTC! 💻 Tune in here: [https://www.youtube.com/live/t\_Y90TZzx1Y](https://www.youtube.com/live/t_Y90TZzx1Y "") 💬 Join the conversation on Slack: Leave your messages in the **#C028A53GAJE** channel (we’ll be answering your questions live) See you soon! \_PS. We’ll be sharing some more, very exciting and secret (for now) news, in a few hours with you. So stay tuned\_🚀cerbos 👏 3 cerbie 3 🎉 2 💡 3 👀 2 a Anna Paykina 10/30/2024, 9:21 AM Aaand hello again, ! Here’s the news we wanted to share! 🎉 **We have just launched our eBook** 📖➡️ **“Monolith to microservices migration: 10 critical challenges to consider”** Transitioning from a monolithic architecture to microservices is an intricate, time-consuming task. It’s much larger than just a project... It’s a program to change the entire organization. Which is why we put together this 10-part series 😊In it, we’ll guide you through the process of re-architecting both your tech stack and organizational structure when transitioning from a monolith to a microservice. 💡 **If you’d like to download the eBook - please DM @Aram Andreasyan, and he will send it to you** 💡 😊 🙏 If you have a moment, and find the eBook to be helpful, please support our launch by **[liking our LinkedIn announcement post!](https://www.linkedin.com/posts/cerbos-dev_monolith-to-microservices-migration-ebook-activity-7257376917811552256-bDss?utm_source=share&utm_medium=member_desktop "")** We would really appreciate it. _PS. Check out the comment under this thread if you want to get a glimpse into what we cover in each of the 10 chapters._ cerbie 6 👏 4 🙌 5 👀 3 cerbos 4 🎉 8 - 1 - 1 a Anna Paykina 10/31/2024, 3:21 PM Happy Halloween from Cerbos! 🎃 🎃 5 cerbie 4 💫 2 1️⃣ 1 😁 2 👻 1 a Anna Paykina 11/05/2024, 5:39 AM Hello, ! Join us for tomorrow’s AMA 🙌 Details ⬇️ cerbie 3 💡 3 😊 1 💬 3 a Anna Paykina 11/06/2024, 7:17 AM Hey, Cerbos community 😊 📰\* [Our monthly newsletter](https://cerbos-20289770.hs-sites.com/cerbos-november-2024-update "")\\* went out earlier today! Here’s what we covered in there: • CI pipeline updates in **[Cerbos Hub](/content/product-cerbos-hub ""/index.html)** • New guides on managing **[RBAC in Kubernetes](/content/blog/guide-to-kubernetes-rbac ""/index.html)**, Java authentication and **[authorization](/content/blog/authentication-and-authorization-in-java ""/index.html)**, implementing authorization using **[Cerbos in Go](/content/blog/how-to-implement-authorization-in-go ""/index.html)**, using **[Cerbos with JWT](/content/blog/json-web-tokens-authorization-cerbos ""/index.html)**, and **[authorization in Express](/content/blog/implement-authorization-in-express ""/index.html)** applications • Importance of thinking about both your **[security and users](/content/blog/security-and-users-when-implementing-authorization ""/index.html)** when implementing authorization • Why **[granular, scalable control is a must](/content/blog/why-granular-scalable-control-is-a-must-for-every-cto ""/index.html)** for every CTO • 🌟 **Milestone alert** 🌟 **Cerbos PDP has surpassed 3,100 stars on GitHub! We’re grateful for the growing community support and trust. [Check out our repository here.](https://github.com/cerbos/cerbos "")** _PS. You can always [subscribe to our newsletter](/content/subscribe ""/index.html) to get future updates as soon as they come out_ 🌟 3 📰 1 cerbie 1 a Anna Paykina 11/06/2024, 10:11 AM Also, check out our new guide on how to use ReactJS for secure RBAC 🙂 💡 [https://www.cerbos.dev/blog/how-to-use-react-js-for-secure-role-based-access-control](/content/blog/how-to-use-react-js-for-secure-role-based-access-control ""/index.html) 😊 1 💻 1 a Anna Paykina 11/12/2024, 9:19 AM Hey ! Happy Tuesday! 🙂 We have introduced a **new use case - Securing access control for RAG and LLMs with Cerbos** 🌟 The functionality is available natively as part of Cerbos PDP and Cerbos Hub. So if you’re looking for ways to install guardrails around your AI applications 👉 [you can find the details here.](https://solutions.cerbos.dev/authorization-in-rag-based-ai-systems-with-cerbos "") 🙌 5 cerbie 6 🔒 4 💪 4 👀 2 🙌🏼 1 🙌🏻 1 🤖 2 a Anna Paykina 11/13/2024, 6:18 AM Hey community! Happy to share that **Cerbos is now in the running for the Hackernoon startups award** (under cybersecurity -> access control) 🙂 ⭐ **If you would like to support us**, you can do so by clicking on Cerbos and giving us a vote 🙌 [https://hackernoon.com/startups/europe/europe-london-england-uk?stup=66b3e24a34a7dea7f897aa3c](https://hackernoon.com/startups/europe/europe-london-england-uk?stup=66b3e24a34a7dea7f897aa3c "") 🙌 3 🙌🏼 1 a Anna Paykina 11/19/2024, 5:59 AM hey ! If you’re using Supabase, do check out our [new demo Supabase + Cerbos](/content/blog/cerbos-supabase ""/index.html) 💡 cerbie 1 🌟 2 💡 1 🫶 1 🦸 1 a Anna Paykina 11/20/2024, 8:45 AM Hey ! We have some news for you :) **[Cerbos is now available on AWS Marketplace](/content/news/cerbos-aws-marketplace ""/index.html)**! 🎉 For those of you already using Cerbos, this means even more flexibility and simplicity when managing your fine-grained access controls within your AWS environment. If you’re just getting started with Cerbos, it’s the perfect time to dive in and take advantage of AWS integration! 🙌 As always, we’re here to help, answer any questions, and hear your feedback! 🙌🏼 1 🙌 3 ☁️ 3 aws 3 a Anna Paykina 11/25/2024, 10:03 AM Hey, ! We wanted to share a very interesting piece by [Michael Westergaard](https://www.linkedin.com/in/klafbang/ "") with you 🙂 In his step-by-step guide, Michael goes through building **authorization with Spring Security and Spring Data JPA.** Feel free to check it out here 👉 [https://westergaard.site/2024/11/towards-better-spring-support-for-cerbos/](https://westergaard.site/2024/11/towards-better-spring-support-for-cerbos/ "") 😊 2 🙌 2 🌟 2 ♨️ 4 ☕ 2 GitHub 11/26/2024, 9:18 AM [Release - v0.40.0](https://github.com/cerbos/cerbos/releases/tag/v0.40.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.40.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.40.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.40.0.html "") **Changelog** **Features** • [18f8e37](https://github.com/cerbos/cerbos/commit/18f8e375f80ad9055d58902ca0de6aee424f7701 "") feat(plan): Add support for role policies ( [#2341](https://github.com/cerbos/cerbos/pull/2341 "")) • [9ff41a4](https://github.com/cerbos/cerbos/commit/9ff41a491485317701ebe06c81a91cbdea9970d3 "") feat: Allow default policy version to be configured in tests ( [#2352](https://github.com/cerbos/cerbos/pull/2352 "")) • [0ead3be](https://github.com/cerbos/cerbos/commit/0ead3bea607f0fff683a00ad99a503e9702489b1 "") feat: Define constants for use in condition expressions ( [#2364](https://github.com/cerbos/cerbos/pull/2364 "")) • [2856d7d](https://github.com/cerbos/cerbos/commit/2856d7d72ab28668b264d599a84427fe70c7361d "") feat: Multiple principals and/or resources in a test case ( [#2338](https://github.com/cerbos/cerbos/pull/2338 "")) • [fcc3e75](https://github.com/cerbos/cerbos/commit/fcc3e754c1e34003a033fcab869923487c50497a "") feat: Support constants in ``` cerbosctl ``` ( [#2365](https://github.com/cerbos/cerbos/pull/2365 "")) • [ee13be0](https://github.com/cerbos/cerbos/commit/ee13be08f0a50f0e44ce3fc1cff1908094071355 "") feat: Use groups of principals and/or resources in test cases ( [#2340](https://github.com/cerbos/cerbos/pull/2340 "")) **Enhancements** • [b2e1f04](https://github.com/cerbos/cerbos/commit/b2e1f046a010013fc08d871e1809340b2391a6f3 "") enhancement!: Report an error if a test exercised time-based policy conditions without specifying ``` now ``` ( [#2354](https://github.com/cerbos/cerbos/pull/2354 "")) • [a5b7f8e](https://github.com/cerbos/cerbos/commit/a5b7f8ebbc7c70951cd710b9cb091938f1d712f7 "") enhancement(plan): Query plan scope permissions support for resource and principal policies ( [#2361](https://github.com/cerbos/cerbos/pull/2361 "")) • [886248a](https://github.com/cerbos/cerbos/commit/886248a927a340603961f57ec423a26c8fbef6b4 "") enhancement: Add user-agent to default allowed headers for CORS ( [#2345](https://github.com/cerbos/cerbos/pull/2345 "")) • [debdefc](https://github.com/cerbos/cerbos/commit/debdefc89b6cd079af1445e97dc521eb79c19cf3 "") enhancement: Introduce policy scope FALL\_THROUGH\_ON\_ALLOW strategy ( [#2325](https://github.com/cerbos/cerbos/pull/2325 "")) • [018340b](https://github.com/cerbos/cerbos/commit/018340b74e9d00eda655386c1f5ae54c205b265d "") enhancement: Make ``` --verbose ``` less noisy in combination with ``` --run ``` ( [#2351](https://github.com/cerbos/cerbos/pull/2351 "")) • [c1d16b9](https://github.com/cerbos/cerbos/commit/c1d16b9bcb54d8fd4d7f85f55006af3a26a35f48 "") enhancement: Make ``` now ``` fully deterministic ( [#2353](https://github.com/cerbos/cerbos/pull/2353 "")) • [d3a3448](https://github.com/cerbos/cerbos/commit/d3a344875a4154396d86d68c587919eeb34919e3 "") enhancement: Make scopePermissions a required field on role policies ( [#2333](https://github.com/cerbos/cerbos/pull/2333 "")) • [2fb5853](https://github.com/cerbos/cerbos/commit/2fb58538db3e090847854975f5b90f0502844314 "") enhancement: Role policies parent roles field ( [#2349](https://github.com/cerbos/cerbos/pull/2349 "")) • [8d92d97](https://github.com/cerbos/cerbos/commit/8d92d97cda1b4096de1670e86f06c362910ec664 "") enhancement: Validate fixtures files with JSON schemas to improve error messages ( [#2346](https://github.com/cerbos/cerbos/pull/2346 "")) **Bug fixes** • [ba1ebf0](https://github.com/cerbos/cerbos/commit/ba1ebf03d25f4e048a1699d49eba01acc3ece639 "") fix(helm): Remove whitespace chomp for priorityClassName so valid yaml is rendered ( [#2337](https://github.com/cerbos/cerbos/pull/2337 "")) • [b7e5c77](https://github.com/cerbos/cerbos/commit/b7e5c7703d82b292737cf559de9ff761140f856c "") fix(plan): A policy with only conditional DENY rule must produce ``` ALWAYS_DENIED ``` ( [#2369](https://github.com/cerbos/cerbos/pull/2369 "")) • [6093dac](https://github.com/cerbos/cerbos/commit/6093dac4a92dad964bc5bfcdda56cdf47c55a98a "") fix: Command execution fails with ``` cerbos run ``` since v0.39 ( [#2358](https://github.com/cerbos/cerbos/pull/2358 "")) • [5c2d31e](https://github.com/cerbos/cerbos/commit/5c2d31ea24fc385e48fdd3f726b6cd17d24ad0cd "") fix: Inspect policy output expressions ( [#2392](https://github.com/cerbos/cerbos/pull/2392 "")) • [9851460](https://github.com/cerbos/cerbos/commit/9851460e09f8e2e6713489f3e7f4278453fc059a "") fix: Populate path field of validation errors ( [#2363](https://github.com/cerbos/cerbos/pull/2363 "")) **Documentation** • [f8b0a47](https://github.com/cerbos/cerbos/commit/f8b0a4746d48c36cdca80a2a4a08416c33feb3c9 "") docs: Remove extraneous space that breaks rendering ( [#2347](https://github.com/cerbos/cerbos/pull/2347 "")) • [02141da](https://github.com/cerbos/cerbos/commit/02141da4616b9b19ca2dd7bcb3d197da595ce7dc "") docs: Update gRPC API section ( [#2387](https://github.com/cerbos/cerbos/pull/2387 "")) **Chores** • [c95133d](https://github.com/cerbos/cerbos/commit/c95133d69d08a06f08e36c2d10ad58e56795384c "") chore(ci): Increase E2E test timeout ( [#2359](https://github.com/cerbos/cerbos/pull/2359 "")) • [591d25d](https://github.com/cerbos/cerbos/commit/591d25df5c1d253a3f9351783cc2a99005219f1e "") chore(deps): Bump [github.com/golang-jwt/jwt/v4](http://github.com/golang-jwt/jwt/v4 "") from 4.5.0 to 4.5.1 in /tools ( [#2378](https://github.com/cerbos/cerbos/pull/2378 "")) • [0a49f42](https://github.com/cerbos/cerbos/commit/0a49f4206b2112270793089a76333f58ab478db3 "") chore(deps): Revert to upstream go-yaml ( [#2383](https://github.com/cerbos/cerbos/pull/2383 "")) • [40ca449](https://github.com/cerbos/cerbos/commit/40ca449652860f302574332a8eacb329a92fe4c3 "") chore(deps): Update bufbuild/buf-setup-action action to v1.45.0 ( [#2334](https://github.com/cerbos/cerbos/pull/2334 "")) • [c0fa72b](https://github.com/cerbos/cerbos/commit/c0fa72b9817b2601ef9955471b88046fcea72411 "") chore(deps): Update bufbuild/buf-setup-action action to v1.47.2 ( [#2382](https://github.com/cerbos/cerbos/pull/2382 "")) • [91ca366](https://github.com/cerbos/cerbos/commit/91ca3661d8b427ff6aecbfae559961c8aa4941e7 "") chore(deps): Update dependency node to v22 ( [#2377](https://github.com/cerbos/cerbos/pull/2377 "")) • [d6203ed](https://github.com/cerbos/cerbos/commit/d6203edddcb2e2de28e6789920999e9daa33dd77 "") chore(deps): Update dependency verdaccio to v6 ( [#2357](https://github.com/cerbos/cerbos/pull/2357 "")) • [254d95a](https://github.com/cerbos/cerbos/commit/254d95a3d570f31032c0376156445a874dba8af4 "") chore(deps): Update github actions deps ( [#2332](https://github.com/cerbos/cerbos/pull/2332 "")) • [3cc8070](https://github.com/cerbos/cerbos/commit/3cc80705d677e528cd93052f2c7843777e9ed37c "") chore(deps): Update github actions deps ( [#2375](https://github.com/cerbos/cerbos/pull/2375 "")) • [555e227](https://github.com/cerbos/cerbos/commit/555e2270de86658051b0f2882e9806c96d9fe6f8 "") chore(deps): Update go deps ( [#2331](https://github.com/cerbos/cerbos/pull/2331 "")) • [6e20018](https://github.com/cerbos/cerbos/commit/6e20018050cce77ad706a8a3635e6c9d7587202f "") chore(deps): Update go deps ( [#2335](https://github.com/cerbos/cerbos/pull/2335 "")) • [04d11c5](https://github.com/cerbos/cerbos/commit/04d11c5534b21bbac8dbb3b5027b994abfd6523b "") chore(deps): Update go deps ( [#2355](https://github.com/cerbos/cerbos/pull/2355 "")) • [f3539fe](https://github.com/cerbos/cerbos/commit/f3539feee84e20eaca9dc36a268f32259437a7aa "") chore(deps): Update go deps ( [#2360](https://github.com/cerbos/cerbos/pull/2360 "")) • [576637c](https://github.com/cerbos/cerbos/commit/576637c1fd8506d922d8b9e2309229174fcbbd52 "") chore(deps): Update go deps ( [#2367](https://github.com/cerbos/cerbos/pull/2367 "")) • [3e47658](https://github.com/cerbos/cerbos/commit/3e476585949876526bc735573fc95218c2e56469 "") chore(deps): Update go deps ( [#2376](https://github.com/cerbos/cerbos/pull/2376 "")) • [d9ca1ed](https://github.com/cerbos/cerbos/commit/d9ca1edea36c1f6a4192b1e7aab6c0dcc901b2e4 "") chore(deps): Update go deps ( [#2381](https://github.com/cerbos/cerbos/pull/2381 "")) • [e862e9a](https://github.com/cerbos/cerbos/commit/e862e9ada202de05a7987bddb31e1583eb0ec3e7 "") chore(deps): Update go deps (! 🙂 Happy Monday! We’re happy to share that chapter 5 of our “Monolith to Microservices Migration ebook” is now live on our blog! 👉 [https://www.cerbos.dev/blog/monitoring-and-observability-microservices](/content/blog/monitoring-and-observability-microservices ""/index.html) This week, we’re diving into the challenges of **implementing monitoring and observability in microservices** architectures & ways to overcome them. _PS. Next week we’ll publish the next post in the series: “Testing and deployment strategies in the microservices architecture”. Or, you can download the complete 10-part series in one e-book now: **["Monolith to microservices migration: 10 critical challenges to consider".](https://solutions.cerbos.dev/monolith-to-microservices-migration-ebook "")**_ 📖 3 🙌 3 💡 2 cerbie 2 a Anna Paykina 12/03/2024, 8:14 AM Hey ! We have some exciting news we want to share with you 🙂 🚀 **We have introduced new features to Cerbos PDP!** [Cerbos PDP](/content/product-cerbos-pdp ""/index.html) (our open source solution) enables our users to define powerful, context-aware access control in simple, intuitive, and testable policies. New updates include: • 🆕 **Support for policy versioning and scoping** enabling per-tenant, per application policy design and iteration fitting into existing software development workflows. • 🆕 **Policy inspection** via cerbosctl inspect command and API endpoint provides programmatic access to an outline of policies, to drive UI and policy manipulation as well as supporting debugging. • 🆕 **Detailed error reporting** with concise policy test outputs and clear error descriptions along with contextual information, to help debug access policies issues faster. • 🆕 **Artifact signing and SBOM generation.** All Cerbos release artifacts, binaries and containers, are now signed using Sigstore, making them verifiable for end-to-end sof\*tware supply chain security.\* • 🆕 **Local PDPs connected to Cerbos Hub Playgrounds** enables developers to author policies and in real time see their impact in the application they are developing. Check out our [latest release notes for more details.](https://docs.cerbos.dev/cerbos/latest/releases/v0.40.0 "") _**PS. We’re also happy to share that this week we [surpassed 3333 stars on Github!](https://github.com/cerbos/cerbos "") Please support us with your star**_ 🙏 😊 🚀 2 cerbie 4 cerbos 2 🌟 4 📈 1 a Anna Paykina 12/09/2024, 7:07 AM hey, Cerbos community! ☀️ We’re happy to share that chapter 6 of our “Monolith to Microservices Migration ebook” is now live on our blog! [https://www.cerbos.dev/blog/testing-and-deployment-strategies-microservices](/content/blog/testing-and-deployment-strategies-microservices ""/index.html) 📖 This week, we’re diving into the best practices for testing and deploying microservices & go though an example of how Netflix ensures durable deployment with rigorous testing. _PS. Next week we’ll publish the next post in the series: “Understanding the security and access control requirements of microservices environment”._ _Or, you can download the complete 10-part series in one e-book now: **["Monolith to microservices migration: 10 critical challenges to consider".](https://solutions.cerbos.dev/monolith-to-microservices-migration-ebook "")**_ 📖 3 cerbie 2 🙌 1 💡 1 a Anna Paykina 12/16/2024, 9:02 AM hey ! Happy Monday! We’re happy to share that chapter 7 of our “Monolith to Microservices Migration ebook” is now live on our blog! [https://www.cerbos.dev/blog/security-and-access-control-microservices](/content/blog/security-and-access-control-microservices ""/index.html) This week, we’re diving into the potential vulnerabilities of a microservices architecture, and how to safeguard against them. _PS. On January 13, 2025, we’ll publish the next post in the series, on achieving optimal performance and scalability in microservices architectures._ _Or, you can download the complete 10-part series in one e-book now: **["Monolith to microservices migration: 10 critical challenges to consider".](https://solutions.cerbos.dev/monolith-to-microservices-migration-ebook "")**_ 🙌 2 📖 3 🎉 2 🙌🏼 1 ❤️ 1 a Anna Paykina 12/19/2024, 5:34 AM Hey everyone! We recently published a new blog post “ [CRDTs and collaborative playgrounds](/content/blog/crdts-and-collaborative-playground ""/index.html)” 👀 💻 One of the tools we offer is a collaborative IDE and testing environment we nicknamed the “ [Playground](/content/features-benefits-and-use-cases/cerbos-playground ""/index.html)” (because access control should be a joy, not a chore). We saw real value in building the environment with collaboration in mind—both for efficiency in authoring policies and also as a tool for sharing knowledge or educating others. But how does one make an app collaborative? There are several approaches, but we chose one that stands out for its elegance and efficiency. To enable this seamless collaboration, we’ve leveraged the power of Conflict-Free Replicated Data Types (CRDTs). **Check out the blog for a deep dive into how we use CRDTs.** 🙌 1 cerbie 2 👀 1 💻 1 a Anna Paykina 12/19/2024, 2:07 PM hey everyone! Coming back to you with some more news 🙌 We’ve just published a blog post on [how to build an authorization system for your RAG applications with LangChain, Chroma DB and Cerbos](/content/blog/authorization-for-rag-applications-langchain-chromadb-cerbos ""/index.html) 🔒 Check it out if you’re interested in diving into: • A hands-on example of RAG applications and how to develop them in Python using the LangChain framework and Chroma DB. • Various security concerns for RAG architecture. • Overview of various authorization techniques. • Importance of authorization for RAG applications. • Implementing RAG authorization system using Cerbos, an open source authorization layer. 💪 2 cerbie 4 👍 1 👍🏻 1 🤖 1 a Anna Paykina 12/20/2024, 10:52 AM Happy Friday, Cerbos community! 😊 As 2024 comes to an end - we wanted to **recap** some of our highlights from the year 🌟 Over the course of 2024, our team members attended over 20 conferences, our founders appeared as guests on 15 podcasts, our open-source PDP reached over 3400 stars on GitHub, and our Slack community (you all!) grew to over 500 members! 💪 [More details here](/content/news/a-look-back-at-2024 ""/index.html) **We thank all of you for being part of our community, and for showing us support!** Happy holidays! 🎄☃️ 🌟 5 🎄 5 cerbos 5 ❄️ 3 🎅 2 🍾 3 🎉 4 a Anna Paykina 01/09/2025, 12:57 PM Hey ! We hope you’ve all had a great start to the new year ☺️🎉 Happy to share that chapter 8 of our “Monolith to Microservices Migration ebook” is now live on our blog! [https://www.cerbos.dev/blog/performance-and-scalability-microservices](/content/blog/performance-and-scalability-microservices ""/index.html) This week, we’re diving into the challenges of optimizing a microservices architecture for scalability and performance, and how to navigate them. _Or, you can download the complete 10-part series in one e-book now: **["Monolith to microservices migration: 10 critical challenges to consider".](https://solutions.cerbos.dev/monolith-to-microservices-migration-ebook "")**_ 👋 2 🙌 3 📖 4 🌟 3 🙌🏻 1 cerbie 8 👋🏼 1 🙌🏼 1 a Anna Paykina 01/13/2025, 7:22 AM Hey , happy Monday! Chapter 9 of our “Monolith to Microservices Migration ebook” is live! [https://www.cerbos.dev/blog/organizational-technical-challenges-migrating-monolith-to-microservices](/content/blog/organizational-technical-challenges-migrating-monolith-to-microservices ""/index.html) This week, we’re examining how to navigate the associated **cultural shift and challenges, when going through a monolith to microservices migration**. Amazon example included 😊 📖 4 🙌 2 😊 3 🙌🏼 1 🚝 1 a Anna Paykina 01/14/2025, 6:35 AM Hello, Cerbos community! We have some exciting news we wanted to share with you all 🙂 Startups 100, the UK’s longest-running index of disruptive new startups, has unveiled its 2025 edition, and Cerbos proudly ranks 30th on the list! 🏅 🚀 _If you’re interested in discovering the details - you [can check out our blog post on the news](/content/news/startups-100-cerbos ""/index.html)._ 🏅 5 🚀 5 cerbie 4 🙌 3 a Anna Paykina 01/16/2025, 10:10 AM Hey ! We wanted to share a new piece written by **@Hasan Ayan** with you 😊 The Backend for Frontend concept in Remix and its associated hooks such as useLoaderData or useFetcher are great tools for building dynamic pages. In most cases, these hooks provide a simple and reliable way of getting data from loaders. 🤔 However, there are some cases where this concept imposes certain limitations. While working on our Audit Logs feature, we hit one of them. [In this article, Hasan Ayan shares more on that limitation and shows how we implemented a solution for ourselves](/content/blog/useasyncfetcher-implement-asynchronous-fetch-in-remix ""/index.html) 🔑 💡 3 🌟 2 cerbie 4 💪 2 🔑 2 💪🏻 1 💪🏼 1 a Anna Paykina 01/20/2025, 6:55 AM Hey ! 👋 The final chapter (10) of our “Monolith to Microservices Migration ebook” is now live on our blog! [https://www.cerbos.dev/blog/team-collaboration-and-code-ownership-microservices](/content/blog/team-collaboration-and-code-ownership-microservices ""/index.html) This week, we’re diving into effective team collaboration and code ownership for managing microservices systems. cerbie 4 👀 3 🌟 3 📖 4 a Anna Paykina 01/22/2025, 8:58 AM Hey everyone, wanted to share our latest blog with you 🙂⬇️ Auth0 is a popular platform when it comes to identity and access management services. However, the growing need for _customizable, self-hosted_ solutions has led organizations to explore _open source_ alternatives. Our latest blog dives into six solid contenders: Keycloak, Gluu, Authentik, Authelia, SuperTokens, and FusionAuth. 🔗 Read the full article here & find the right fit for your next project [https://www.cerbos.dev/blog/auth0-alternatives](/content/blog/auth0-alternatives ""/index.html) 💡 2 🙌 1 a Anna Paykina 01/22/2025, 10:38 AM Hey again, We recently released a blog post + video on the [11 trends that will define the future of authorization](/content/blog/11-authorization-and-iam-trends-in-2025 ""/index.html) 💡 If you’re interested - feel free to check it out! _The piece is based on our expertise as an enterprise authorization provider, and insights from hundreds of conversations with architects, IAM leads, and CISOs we got a chance to speak with over the past year._ 👀 3 🚀 3 😊 2 👏 2 👏🏼 1 a Anna Paykina 01/29/2025, 8:24 AM Hey, ! We have rolled out an **update to the Cerbos Hub Playground** that’s tailored for those of you who are building more complex policies and want a development experience that mirrors real-world deployments more closely. This update introduces **Cerbos Hub Playground engine settings**, letting you [configure](https://docs.cerbos.dev/cerbos-hub/playground#_playground_engine_settings "") the Cerbos PDP engine used when evaluating policy during development, in a way that reflects your actual environment. 👉 [Get the details here](/content/blog/cerbos-hub-playground-engine-settings ""/index.html) 💡 3 cerbie 4 🚀 5 a Anna Paykina 01/30/2025, 6:32 AM Hey, Cerbos community! 👋😊 We just published a blog post discussing the core principles, advantages and disadvantages, and practical concerns of **stateless architecture.** **[Feel free to check it out here](/content/blog/statements-about-stateless ""/index.html)** 🙌 3 👀 3 cerbie 3 🙌🏼 1 💻 1 d a - 3 - 2 a Anna Paykina 02/04/2025, 7:15 AM Hey ! Feel free to check out our latest blog post, it’s about implementing authorization and access control in **Flask** 👉 [https://www.cerbos.dev/blog/authorization-in-flask](/content/blog/authorization-in-flask ""/index.html) 👈 👀 2 👏 2 cerbie 4 👏🏼 1 🐍 1 a Anna Paykina 02/07/2025, 12:49 PM Happy Friday, community 👋 😊 We just published a deep dive into **externalized authorization management (EAM)**. In the blog, we cover: • what EAM is; • when you might need it; • the associated technical benefits; • along with how to implement it. 👉 [Feel free to check out the blog on EAM here](/content/blog/externalized-authorization-management-eam-and-benefits ""/index.html) 👈 Have a great weekend! 🙌 2 😊 1 cerbos 2 a Anna Paykina 02/11/2025, 10:46 AM hey everyone! :) We just published a blog post, where we explore different approaches to enforcing **RBAC** and **ABAC** in an **enterprise** context. As well as what drives the business need to choose between RBAC and ABAC, the various architectural deployments of these access control methods, and the implications of their selection. If you’re interested, [you can find the blog with all the details here](/content/blog/enterprise-access-control ""/index.html) cerbie 3 🙌 2 👍 5 a Anna Paykina 02/12/2025, 8:46 AM Hey community! We have some exciting news! Cerbos PDP - our open-source authorization solution, just hit 3.6k stars on GitHub! 🚀 🎉 [https://github.com/cerbos/cerbos](https://github.com/cerbos/cerbos "") Thank you all for your support ☺️💪 cerbie 4 💪 1 cerbos 1 🏅 2 💫 2 a Anna Paykina 02/17/2025, 8:53 AM Hey, ! 👋 We have a new blog out, where we discuss our **journey from using OPA to building our own engine.** If you’re interested in the details (as well as understanding why we decided to make that transition, and what benefits we have seen since then) - [feel free to check out the piece here](/content/blog/from-opa-to-our-own-engine-cerbos ""/index.html) 👀 2 💪 2 cerbie 3 cerbos 2 👍 2 a Anna Paykina 02/19/2025, 9:02 AM Hey ! We’ve gotten many questions from our community and customers about **securing non-human identities**. So we wanted to get into this topic in more detail 😊⬇️ Securing applications is not just about authorizing users based on their identity. Service-to-service calls, external API clients, AI agents, bots, and background jobs all act as independent workloads with their own identities, all requiring access to data and resources. **NHIs need to be authorized** just like human users. Otherwise, these workloads can become **security risks**, leading to over-privileged services, unauthorized data exposure, and compliance violations. Here you can learn how Cerbos can be used to secure NHIs 👉 [https://www.cerbos.dev/features-benefits-and-use-cases/authorization-non-human-identities](/content/features-benefits-and-use-cases/authorization-non-human-identities ""/index.html) 💪 3 🚀 5 🌟 4 cerbos 4 👍 2 🤖 2 💪🏻 1 💪🏼 1 👍🏼 1 a Anna Paykina 02/21/2025, 7:12 AM happy Friday, community! 🙂 We wanted to share our latest blog post with you. We dove into the various **certifications** for enterprise architects, domain solutions architects, and software engineers, detailing their formats, prerequisites, and associated costs. _Although certification doesn’t replace experience - it can be a valuable addition to professional experience for **architects**._ So if you’re interested - feel free to [check out the blog post here](/content/blog/certifications-for-enterprise-architects-domain-solutions-architects-software-engineers ""/index.html). Some certifications we cover include: TOGAF 9, ITIL Master, Zachman Framework, AWS Certified Solutions Architect, Google Professional Cloud Architect, and others. 💡 3 🌟 1 😊 2 a Anna Paykina 02/24/2025, 11:49 AM Hey ! In our latest blog, we dove into the topic of translating **business requirements to authorization policy for _HR_** 💡 Check it out if you’d like to understand the process of reviewing business requirements, analyzing them, defining policies, and ultimately deploying them to production systems as efficiently as possible 👉 [https://www.cerbos.dev/blog/business-requirements-to-authorization-policy-in-hr-systems](/content/blog/business-requirements-to-authorization-policy-in-hr-systems ""/index.html) 🌟 2 cerbie 2 🙌 2 🙌🏼 1 a Anna Paykina 02/26/2025, 8:18 AM hey 👋 We are happy to share that **we’ve [introduced support](/content/blog/audit-logs-for-cerbos-hub-embedded-pdps ""/index.html) for capturing audit decision logs from the Cerbos Hub Embedded Policy Decision Points (ePDP) using the latest version of the Cerbos Javascript SDK** 🌟 🎉 This feature enables organizations to track and analyze authorization decisions made locally in embedded environments, ensuring complete visibility and auditability, without relying on a centralized PDP or Cerbos Hub. [Discover the details here](/content/blog/audit-logs-for-cerbos-hub-embedded-pdps ""/index.html) 🌟 3 🚀 3 👀 1 👍 2 a Anna Paykina 03/04/2025, 12:56 PM Hey community! We’ve just published a blog post about **authorization at the edge and it’s benefits** • ✅ Faster response times • ✅ More reliable access control • ✅ Reduced load on central servers 👉 [Feel free to check it out here](/content/blog/edge-authorization ""/index.html) 👈 👍 1 💡 1 💫 1 GitHub 03/05/2025, 5:10 AM [Release - v0.41.0](https://github.com/cerbos/cerbos/releases/tag/v0.41.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.41.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.41.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.41.0.html "") **Changelog** **Features** • [bfef008](https://github.com/cerbos/cerbos/commit/bfef00832bae649972f33e469e090ae0d6ada8b0 "") feat(plan): Use scope value in the query plan ( [#2485](https://github.com/cerbos/cerbos/pull/2485 "")) • [9bec734](https://github.com/cerbos/cerbos/commit/9bec7341ae18aa6502b53af49f76d53df5722f1e "") feat: Replace labels with deployments in bundle API v2 ( [#2483](https://github.com/cerbos/cerbos/pull/2483 "")) **Enhancements** • [71682d6](https://github.com/cerbos/cerbos/commit/71682d6772a3ac18ebb57da71f52891e61063325 "") enhancement!: Switch to ContextEval to evaluate CEL expressions ( [#2495](https://github.com/cerbos/cerbos/pull/2495 "")) • [538ab24](https://github.com/cerbos/cerbos/commit/538ab24b47005498702701a55073b0c69205fa62 "") enhancement: Correctly set GOMAXPROCS on ECS ( [#2459](https://github.com/cerbos/cerbos/pull/2459 "")) • [41787ba](https://github.com/cerbos/cerbos/commit/41787ba1b9e47fdabc9ab15a5b03b3de4807b5b2 "") enhancement: Fail tests with unreachable output expectations ( [#2418](https://github.com/cerbos/cerbos/pull/2418 "")) • [c2f16ff](https://github.com/cerbos/cerbos/commit/c2f16ff7d6efbd0c6c1e013efa7f5b1791f3ee09 "") enhancement: Lazy rule table ( [#2460](https://github.com/cerbos/cerbos/pull/2460 "")) • [131bf5f](https://github.com/cerbos/cerbos/commit/131bf5f2403bc6ac78e0d764eb7d914a0a5e3c15 "") enhancement: Rule table engine ( [#2442](https://github.com/cerbos/cerbos/pull/2442 "")) • [ecf08cc](https://github.com/cerbos/cerbos/commit/ecf08cc25685cbb28546f62f0a4148ea614b4c82 "") enhancement: Support bundlev2 ( [#2395](https://github.com/cerbos/cerbos/pull/2395 "")) **Bug fixes** • [038719b](https://github.com/cerbos/cerbos/commit/038719b9c619f2c1d88cc942646439b9f34a004c "") fix: Add missing policy required for mutable e2e tests ( [#2502](https://github.com/cerbos/cerbos/pull/2502 "")) • [bd3222d](https://github.com/cerbos/cerbos/commit/bd3222dd55bf489e80e8c3b2aaf5448c4308bf3b "") fix: Correctly handle defaultPolicyVersion engine config ( [#2449](https://github.com/cerbos/cerbos/pull/2449 "")) • [8983b99](https://github.com/cerbos/cerbos/commit/8983b99ae1e9eef5e53ea58c41ca70dc6a8e474d "") fix: Correctly handle partial rule table and event subscription ( [#2455](https://github.com/cerbos/cerbos/pull/2455 "")) • [a676fd1](https://github.com/cerbos/cerbos/commit/a676fd1d515f2c40cdd4e04d8264ed781e5defdd "") fix: Fall back to default policy version sooner in query planner ( [#2450](https://github.com/cerbos/cerbos/pull/2450 "")) • [0b80bcb](https://github.com/cerbos/cerbos/commit/0b80bcb210518d3ee06cd6fb2cb6e35f0ba29dc2 "") fix: Reload rule table when store contents change ( [#2452](https://github.com/cerbos/cerbos/pull/2452 "")) • [f611ff2](https://github.com/cerbos/cerbos/commit/f611ff2c10f2da4ed61ffe89f7e8930bd2c82acf "") fix: Return validation errors and effective policies in query planner responses ( [#2447](https://github.com/cerbos/cerbos/pull/2447 "")) • [a12fd5c](https://github.com/cerbos/cerbos/commit/a12fd5c7302c8c53b9e6bd86fdd3b1bb35f2c8b3 "") fix: Rule table reload should only purge ( [#2467](https://github.com/cerbos/cerbos/pull/2467 "")) • [3596a31](https://github.com/cerbos/cerbos/commit/3596a3145fbc4a792606e3b929a944276e6848c3 "") fix: Use correct filterDebug type in e2e query planner test ( [#2448](https://github.com/cerbos/cerbos/pull/2448 "")) **Documentation** • [73b40e4](https://github.com/cerbos/cerbos/commit/73b40e419461a60df35249f705f0c9b3666d1ae0 "") docs: Correct examples for math functions ( [#2445](https://github.com/cerbos/cerbos/pull/2445 "")) • [9096ecb](https://github.com/cerbos/cerbos/commit/9096ecbb7cc59264304e98e5692a08a083c63f86 "") docs: Scope permissions ( [#2487](https://github.com/cerbos/cerbos/pull/2487 "")) • [1fd792d](https://github.com/cerbos/cerbos/commit/1fd792da9b46bf20de09e5d54fbd515834143348 "") docs: Update 03\_calling-cerbos.adoc of tutorial to use the updated ``` /api/check/resources ``` endpoint ( [#2429](https://github.com/cerbos/cerbos/pull/2429 "")) • [4eb7b26](https://github.com/cerbos/cerbos/commit/4eb7b265fbc43655e04925e50e18cda40ecb2f81 "") docs: Update what-is-cerbos.adoc tenant ->tenet ( [#2406](https://github.com/cerbos/cerbos/pull/2406 "")) **Chores** • [282fe32](https://github.com/cerbos/cerbos/commit/282fe321162b9bfad7b2c637e6339785e1513210 "") chore!: REQUIRE\_PARENTAL\_CONSENT refinements for resource and principal policies ( [#2484](https://github.com/cerbos/cerbos/pull/2484 "")) • [31e635e](https://github.com/cerbos/cerbos/commit/31e635e42b88f6b99b83ed4f5fe9e664c9f12676 "") chore!: Role policy deny rows ( [#2475](https://github.com/cerbos/cerbos/pull/2475 "")) • [24551ba](https://github.com/cerbos/cerbos/commit/24551bac2f84ecf0b68b969a5f39aee6b88e5bd7 "") chore(deps): Bump [filippo.io/age](http://filippo.io/age "") from 1.2.0 to 1.2.1 ( [#2423](https://github.com/cerbos/cerbos/pull/2423 "")) • [7a81126](https://github.com/cerbos/cerbos/commit/7a811268c9f2b9e52f16b3b731f0c0dfbecba959 "") chore(deps): Bump [github.com/go-jose/go-jose/v4](http://github.com/go-jose/go-jose/v4 "") from 4.0.4 to 4.0.5 in /tools ( [#2491](https://github.com/cerbos/cerbos/pull/2491 "")) • [39242a6](https://github.com/cerbos/cerbos/commit/39242a6e6d95958fc867f085e994306360121454 "") chore(deps): Bump [github.com/quic-go/quic-go](http://github.com/quic-go/quic-go "") from 0.48.1 to 0.48.2 in /tools ( [#2405](https://github.com/cerbos/cerbos/pull/2405 "")) • [3792699](https://github.com/cerbos/cerbos/commit/3792699ca803bb2b242a1ba7d06db85f752d98c7 "") chore(deps): Bump [golang.org/x/crypto](http://golang.org/x/crypto "") from 0.29.0 to 0.31.0 in /tools ( [#2414](https://github.com/cerbos/cerbos/pull/2414 "")) • [c03afd6](https://github.com/cerbos/cerbos/commit/c03afd64f42cc2f05c855f07443915813bb77634 "") chore(deps): Remove SQL Server dependencies ( [#2394](https://github.com/cerbos/cerbos/pull/2394 "")) • [09806c6](https://github.com/cerbos/cerbos/commit/09806c61b0b61b2d9dc60fbfc96a1703a181e137 "") chore(deps): Update alecthomas/kong to v1.5.1 ( [#2404](https://github.com/cerbos/cerbos/pull/2404 "")) • [e11f815](https://github.com/cerbos/cerbos/commit/e11f815e69a48c23c8424a89e57797f797c4bc73 "") chore(deps): Update dawidd6/action-download-artifact action to v7 ( [#2417](https://github.com/cerbos/cerbos/pull/2417 "")) • [5571a2c](https://github.com/cerbos/cerbos/commit/5571a2cf535287e8feb23e14ef272098698f3e01 "") chore(deps): Update dependency node to v22.13.0 ( [#2444](https://github.com/cerbos/cerbos/pull/2444 "")) • [4eda1c7](https://github.com/cerbos/cerbos/commit/4eda1c78e3c9d51e8b1cb759766a4da550ffe6d1 "") chore(deps): Update github actions deps ( [#2427](https://github.com/cerbos/cerbos/pull/2427 "")) • [55dc0c8](https://github.com/cerbos/cerbos/commit/55dc0c876ce2aa1c978470d4f62e4abefe56ffff "") chore(deps): Update github actions deps ( [#2464](https://github.com/cerbos/cerbos/pull/2464 "")) • [d6818fa](https://github.com/cerbos/cerbos/commit/d6818fa30616bca48ac41b55f6077a79fa48853c "") chore(deps): Update [github.com/bufbuild/protovalidate-go](http://github.com/bufbuild/protovalidate-go "") to 0.8.0 ( [#2428](https://github.com/cerbos/cerbos/pull/2428 "")) • [d0c26dd](https://github.com/cerbos/cerbos/commit/d0c26dd96aa9cc660d4d046b15c77d324048c955 "") chore(deps): Update [github.com/go-git/go-git/v5](http://github.com/go-git/go-git/v5 "") ( [#2437](https://github.com/cerbos/cerbos/pull/2437 "")) • [aa9a573](https://github.com/cerbos/cerbos/commit/aa9a573c03341cbe9b2029dccb94270249e909b0 "") chore(deps): Update go deps ( [#2397](https://github.com/cerbos/cerbos/pull/2397 "")) • [915609b](https://github.com/cerbos/cerbos/commit/915609b2211d79c5e20703956a4c3c06a90bee98 "") chore(deps): Update go deps ( [#2407](https://github.com/cerbos/cerbos/pull/2407 "")) • [8b6d25e](https://github.com/cerbos/cerbos/commit/8b6d25e076d8f54cc0cb0fcc3e8dd6afec75c217 "") chore(deps): Update go deps ( [#2415](https://github.com/cerbos/cerbos/pull/2415 "")) • [2660e5e](https://github.com/cerbos/cerbos/commit/2660e5ea1aefc7b5b872ae83d526d13d1b750c61 "") chore(deps): Update go deps ( [#2431](https://github.com/cerbos/cerbos/pull/2431 "")) • , happy Monday! 🚀 We wanted to share about our latest update - **Cerbos Prisma Integration v2.0** With our latest update to the reference Prisma Query Plan Adapter, we’ve significantly expanded its capabilities, making it even easier to enforce fine-grained access control within applications using Prisma ORM. Updates include: • Expanded operator support • Deep nested relations • Automatic field inference and type-safe mapping • Improved collection handling • Performance optimizations 👉 [Check out the full blog post for more details & info on how to get started](/content/blog/cerbos-prisma-integration-v2-0 ""/index.html) 👈 🙌 3 🙌🏼 1 a Anna Paykina 03/21/2025, 11:36 AM Hey ! 👋 🎥 We will be hosting a webinar “Cloud, SaaS, or self-hosted? Which authentication & authorization deployment model is right for you?” Join to learn about: • Security & compliance trade-offs across deployment models • Engineering implications from performance to integration complexity • Hidden costs & operational risks you might not expect • How to future-proof your auth stack for scalability & reliability 📅 April 17, 2025 \| 5pm CET / 9am PST (recording will be available to all registrants) 🎙️ Speakers: Dan Moore, Principal Product Engineer at FusionAuth & Alex Olivier, CPO at Cerbos 👉 [register here](/content/ebooks-webinars/choosing-the-right-authentication-and-authorization-deployment ""/index.html) 👈 see you there! ☺️ cerbie 5 🚀 3 🎉 4 👍 3 👍🏼 1 a Anna Paykina 03/24/2025, 9:07 AM Hey everyone! 😊 _Non-human identities now outnumber human users by 17:1, yet they are one of the most overlooked attack vectors in today’s systems._ Which is why we published a new blog post breaking down the **OWASP Top 10 threats to non-human identities (NHIs)**. We explain what each threat is, real-world examples of breaches, and practical steps to mitigate them. Plus, we show how Cerbos helps enforce least privilege and context-aware access control for NHIs. [Feel free to check it out here](/content/blog/securing-non-human-identities-understanding-and-addressing-owasp-top-10-threats ""/index.html) 🌟 1 💡 1 cerbie 1 👍 1 a Anna Paykina 03/25/2025, 9:47 AM Hey ! We’ve published a blog post where we examine the **key elements of compliance** that should be prioritized, from data quality and change management to audit logs and access control. We also explore how picking the right **authorization system can strengthen your compliance efforts.** **[Feel free to check it out here](/content/blog/staying-compliant ""/index.html)** 💡 _A study by the Ponemon Institute found that, on average, non-compliance costs companies about 2.7 times more than meeting compliance requirements in the first place._ 👍 2 🙌 1 💡 2 👍🏼 1 🙌🏼 1 GitHub 03/26/2025, 4:12 AM [Release - v0.42.0](https://github.com/cerbos/cerbos/releases/tag/v0.42.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.42.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.42.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.42.0.html "") \## Changelog \### Features • [e3aef93](https://github.com/cerbos/cerbos/commit/e3aef93179161b7ae089f1e57c805eb45e2c0357 "") feat: SPIFFE functions ( [#2524](https://github.com/cerbos/cerbos/pull/2524 "")) \### Enhancements • [36c7625](https://github.com/cerbos/cerbos/commit/36c7625505557bae20931fcb5a7299ed0a60b166 "") enhancement: Stop logging attribute values as JSON-encoded strings in decision logs ( [#2516](https://github.com/cerbos/cerbos/pull/2516 "")) \### Bug fixes • [8cbeca7](https://github.com/cerbos/cerbos/commit/8cbeca7b88b422fa5832faec42794e3ead4d36bc "") fix: Ensure derived role updates purge rule table caches ( [#2523](https://github.com/cerbos/cerbos/pull/2523 "")) • [4449609](https://github.com/cerbos/cerbos/commit/4449609a7c0151b1a0ba60f71fb5d220b8f9a064 "") fix: Evaluate condition blocks correctly in REPL ( [#2513](https://github.com/cerbos/cerbos/pull/2513 "")) • [f1fc31d](https://github.com/cerbos/cerbos/commit/f1fc31dd6445451cde3687b964f20689e9307db0 "") fix: Purge schema cache on store reload ( [#2522](https://github.com/cerbos/cerbos/pull/2522 "")) • [e4da017](https://github.com/cerbos/cerbos/commit/e4da017c6bed66ebaecdfa2cae5ebd0f49715e43 "") fix: Tidy up rule table trace outputs ( [#2531](https://github.com/cerbos/cerbos/pull/2531 "")) \### Documentation • [970f7fd](https://github.com/cerbos/cerbos/commit/970f7fdd5f6d945e47fe0c4173ec5354930037a3 "") docs: Remove symlink to SQL Server schema ( [#2505](https://github.com/cerbos/cerbos/pull/2505 "")) \### Chores • [b7fa780](https://github.com/cerbos/cerbos/commit/b7fa780ce27b854f5ed0f65f2d6b13c2ec6853f6 "") chore(deps): Bump [github.com/containerd/containerd](http://github.com/containerd/containerd "") from 1.7.25 to 1.7.27 in /tools ( [#2520](https://github.com/cerbos/cerbos/pull/2520 "")) • [2658904](https://github.com/cerbos/cerbos/commit/26589043cb82ece21e569030e54a8b0ccfa85b70 "") chore(deps): Bump [github.com/golang-jwt/jwt/v4](http://github.com/golang-jwt/jwt/v4 "") from 4.5.1 to 4.5.2 in /tools ( [#2527](https://github.com/cerbos/cerbos/pull/2527 "")) • [ed471a3](https://github.com/cerbos/cerbos/commit/ed471a3216754808d22f09fbf9bfed1206b8bcbd "") chore(deps): Bump [github.com/golang-jwt/jwt/v5](http://github.com/golang-jwt/jwt/v5 "") from 5.2.1 to 5.2.2 in /tools ( [#2526](https://github.com/cerbos/cerbos/pull/2526 "")) • [92b5da4](https://github.com/cerbos/cerbos/commit/92b5da43cecc1425c9bd32eec8e2cd9b23c3334f "") chore(deps): Bump [github.com/redis/go-redis/v9](http://github.com/redis/go-redis/v9 "") from 9.7.0 to 9.7.3 ( [#2525](https://github.com/cerbos/cerbos/pull/2525 "")) • [b89d3c4](https://github.com/cerbos/cerbos/commit/b89d3c40834aa511ee0adf39f3af1a6410466313 "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.35.0 to 0.36.0 in /api/genpb ( [#2514](https://github.com/cerbos/cerbos/pull/2514 "")) • [9bff439](https://github.com/cerbos/cerbos/commit/9bff4395498c44241ca210447e679f5f8217172f "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.35.0 to 0.36.0 in /tools ( [#2509](https://github.com/cerbos/cerbos/pull/2509 "")) • [fc62644](https://github.com/cerbos/cerbos/commit/fc626441d994cd584bf3ea246347d478cd00ce56 "") chore(deps): Update go deps ( [#2507](https://github.com/cerbos/cerbos/pull/2507 "")) • [5c2b5bd](https://github.com/cerbos/cerbos/commit/5c2b5bde6bb5cf58626bc2cacfb71ef771382903 "") chore(deps): Update golangci/golangci-lint-action action to v6.5.1 ( [#2517](https://github.com/cerbos/cerbos/pull/2517 "")) • [e682aeb](https://github.com/cerbos/cerbos/commit/e682aeb66dbe3676b2308fdca678829f4f6a9503 "") chore(deps): Update golangci/golangci-lint-action action to v6.5.2 ( [#2528](https://github.com/cerbos/cerbos/pull/2528 "")) • [0276262](https://github.com/cerbos/cerbos/commit/0276262d7e366a5edc0b367c3aaab608e808b8a0 "") chore(deps): Update node.js deps ( [#2508](https://github.com/cerbos/cerbos/pull/2508 "")) • [25b8f18](https://github.com/cerbos/cerbos/commit/25b8f181f4efd0cdb9c6907a09d083d63bc15fab "") chore(deps): Update pnpm to v10.6.3 ( [#2518](https://github.com/cerbos/cerbos/pull/2518 "")) • [ed90ba0](https://github.com/cerbos/cerbos/commit/ed90ba02d84cd6df1344c08e3c6c61838d1b1ce1 "") chore(deps): Update pnpm to v10.6.5 ( [#2529](https://github.com/cerbos/cerbos/pull/2529 "")) • [5d3167a](https://github.com/cerbos/cerbos/commit/5d3167ab3f51cc5aadf688f75e7ec3007b616f9e "") chore(planner): Switch from CEL protobuf to native types ( [#2492](https://github.com/cerbos/cerbos/pull/2492 "")) • [4e6d19b](https://github.com/cerbos/cerbos/commit/4e6d19b9ef746dd82ed6ac3f972e207d18128ac5 "") chore(release): Add 0.42.0 release notes ( [#2532](https://github.com/cerbos/cerbos/pull/2532 "")) • [1a5b7c2](https://github.com/cerbos/cerbos/commit/1a5b7c265b30582ca0007e89f208154cdb6e13b5 "") chore(release): Prepare release 0.42.0 • [bd70cea](https://github.com/cerbos/cerbos/commit/bd70cea2438afaa5e330ec9626ead49e8e54d3eb "") chore(version): Bump version to 0.42.0 • [fa4ac36](https://github.com/cerbos/cerbos/commit/fa4ac3699c848d3c9b4b2f37ac0adfc0010b3bc0 "") chore: Add gopls's modernizer to linters ( [#2515](https://github.com/cerbos/cerbos/pull/2515 "")) • [ba15837](https://github.com/cerbos/cerbos/commit/ba158376f55cef790c2478160c68ff6cfec75230 "") chore: Handle empty policies in the parser ( [#2530](https://github.com/cerbos/cerbos/pull/2530 "")) • [8247248](https://github.com/cerbos/cerbos/commit/8247248eb42217f52d2c58aa0023e7d644c15915 "") chore: Handle kind ROLE in trace printer ( [#2511](https://github.com/cerbos/cerbos/pull/2511 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 03/31/2025, 11:32 AM Happy Monday, community! 😊 We’re heading KubeCon 2025 in London! If you will be there - come meet the Cerbos team at 🔺Booth S632🔺 [Daniel Maher](https://www.linkedin.com/in/dan-phrawzty-maher/ ""), [Emre Baran](https://www.linkedin.com/in/emrebaran/ ""), [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), and [Andrew Haines](https://www.linkedin.com/in/andrewihaines/ "") are looking forward to chatting with you about all things authorization! 📢 Don’t miss Dan’s talk “ [AuthZ as a Dev Workflow: Architecting Better Cloud Native Apps](https://kccnceu2025.sched.com/event/1tx8s/authz-as-a-dev-workflow-architecting-better-cloud-native-apps-dan-phrawzty-maher-cerbos?iframe=no&w=100%&sidebar=yes&bg=no "")” Friday April 4, 2025 15:15 - 15:45 BST Level 1 \| Hall Entrance S10 \| Room C 🎁 And while you’re at it, feel free to participate in our collab raffle with FusionAuth for a chance to win a TIE Interceptor or X-Wing Starfighter. See you there! 🌍 2 cerbie 2 🏆 1 a Anna Paykina 04/03/2025, 10:23 AM hey ! 🚀 We’re happy to share that [Cerbos PDP now supports native parsing of SPIFFE identities in authorization policies](/content/blog/spiffe-identity-parsing-cerbos-pdp ""/index.html)! This unlocks precise access control for authorizing calls based on non-human identities using the framework be it services, workloads, or any other compute job. _This feature introduces a set of Cerbos-specific extensions to the Common Expression Language (CEL) used in policy conditions which understand the structure of a SPIFFE ID such as trust domains, path components, or target the full identity string._ 🙌 1 cerbos 4 👏 2 🚀 1 🙌🏼 1 👏🏼 1 🤖 1 GitHub 04/07/2025, 8:01 AM [Release - v0.43.0](https://github.com/cerbos/cerbos/releases/tag/v0.43.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.43.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.43.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.43.0.html "") \## Changelog \### Bug fixes • [ff7c199](https://github.com/cerbos/cerbos/commit/ff7c19993a0e88bf9fd39709dd0467bc37a99330 "") fix: Maintain derived role mappings during policy updates ( [#2536](https://github.com/cerbos/cerbos/pull/2536 "")) • [03982ea](https://github.com/cerbos/cerbos/commit/03982ea2706171c955c5057a6eab32d09fca7f12 "") fix: Purge rule table on index build failure ( [#2538](https://github.com/cerbos/cerbos/pull/2538 "")) \### Chores • [dba785d](https://github.com/cerbos/cerbos/commit/dba785dc76f81c205096f1fb120d3faa0cf2ae05 "") chore(ci): Make Coveralls upload optional ( [#2541](https://github.com/cerbos/cerbos/pull/2541 "")) • [c1238e0](https://github.com/cerbos/cerbos/commit/c1238e002938e340d950cd2255a217976c4278f7 "") chore(deps): Update go deps ( [#2534](https://github.com/cerbos/cerbos/pull/2534 "")) • [b0c542e](https://github.com/cerbos/cerbos/commit/b0c542e577419b8fa7dec39b559eae368b000fbd "") chore(deps): Update go deps ( [#2540](https://github.com/cerbos/cerbos/pull/2540 "")) • [b074c8f](https://github.com/cerbos/cerbos/commit/b074c8fd3c619d5bd0f05dcddd6bb05d80184011 "") chore(deps): update node.js deps ( [#2535](https://github.com/cerbos/cerbos/pull/2535 "")) • [170a7e8](https://github.com/cerbos/cerbos/commit/170a7e8de66592a0e509232f3339175e991beca2 "") chore(release): Add 0.43.0 release notes ( [#2542](https://github.com/cerbos/cerbos/pull/2542 "")) • [69f4f15](https://github.com/cerbos/cerbos/commit/69f4f1555078c7eb79eb5c79b347a9f3c58965ba "") chore(release): Prepare release 0.43.0 • [c56621c](https://github.com/cerbos/cerbos/commit/c56621c4b51b4ae6e01e5771a7f6f6f11c80964a "") chore(version): Bump version to 0.43.0 • [4ae6dac](https://github.com/cerbos/cerbos/commit/4ae6daca5c2998b4845041c116393df186527038 "") chore: Change logger keys based on bundle version ( [#2533](https://github.com/cerbos/cerbos/pull/2533 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 04/10/2025, 7:04 AM Hey community! 😊 As you might have already seen - we’ve introduced several updates that bring new capabilities and improvements to Cerbos 🙌 With **v0.42 and v0.43**, we’ve added support for SPIFFE identities in policies, improved the structure of audit logs, and tightened the reliability of policy updates in live environments. [Details can be found here](/content/blog/cerbos-pdp-v0-42-and-v0-43-spiffe-identity-support-smarter-logging ""/index.html) 💪🏼 1 👍🏼 1 👍 3 cerbie 4 💪 1 a Anna Paykina 04/22/2025, 5:31 AM Thanks to everyone who joined our webinar on “Choosing the Right Authentication & Authorization Deployment Model” 🥳 📩 If you missed the live session, you can **get the full recording** by [submitting the form here](/content/ebooks-webinars/choosing-the-right-authentication-and-authorization-deployment ""/index.html). _The recording will be sent directly to your email._ During the webinar: 👉 [Dan Moore](https://www.linkedin.com/in/mooreds/ "") [FusionAuth](https://www.linkedin.com/company/fusionauth/ "") and [Alex Olivier](https://www.linkedin.com/in/alexolivier/ "") [Cerbos](https://www.linkedin.com/company/cerbos-dev/ "") compared self-hosted, cloud-hosted, and SaaS authentication solutions, examining their impact on security, compliance, and operational control 👉 Explored how to align deployment choices with your regulatory requirements and data governance needs 👉 Examined performance implications, integration challenges, and compatibility with teams’ technical roadmaps 👉 Covered operational risks including reliability, disaster recovery, and vendor lock-in—plus how to mitigate them 👉 Broke down the total cost of ownership, CapEx vs. OpEx considerations, and potential hidden costs More webinars coming very soon! cerbie 1 🙌 1 🎥 1 a Anna Paykina 04/25/2025, 5:49 AM Hey everyone! Happy Friday! 😊 🎉 We’re excited to share some big news: **[Cerbos has been named Startup of the Year 2024 in Access Control by HackerNoon](/content/news/cerbos-startup-of-the-year-in-access-control-hackernoon ""/index.html)**. This recognition comes after a competitive vote involving 32 companies in our category and nearly 700 community votes. This isn’t just a win for Cerbos—it’s a signal that the tech community is paying serious attention to the problem of authorization. _We wouldn’t be here without your support_ ☺️\_. Whether you voted, contributed to the open-source project, deployed Cerbos in production, or just explored what we’re doing—thank you.\_ This win is a shared one. Onward 🚀 cerbie 5 🌟 2 🚀 3 🏆 4 🙌 2 a Anna Paykina 04/28/2025, 12:06 PM Hey ! 👋 **We would like to invite you to join our upcoming webinar on “Mastering authorization in Fintech”** 💻 [Edgar Rivera](https://www.linkedin.com/in/edgarmariorivera/ "") and [Daniel "phrawzty" Maher](https://www.linkedin.com/in/dan-phrawzty-maher/ "") will walk through how to map business requirements of fintech products to authorization logic, accounting for dynamic trading rules, global market windows, and real-time risk assessment. Then they’ll show how to manage that complexity without cluttering your codebase or making things harder to maintain. ⏰ May 6, 2025 at 5pm CEST / 8am PDT 🔗 👉 [Register](/content/ebooks-webinars/mastering-authorization-in-fintech ""/index.html) [for the webinar](/content/ebooks-webinars/mastering-authorization-in-fintech ""/index.html) [here](/content/ebooks-webinars/mastering-authorization-in-fintech ""/index.html) 📩 Recording available for all registrants cerbie 4 👍 1 🌟 2 👍🏼 1 a d - 3 - 7 a Anna Paykina 05/28/2025, 12:09 PM Hey, community! 😊 Multi-tenancy in SaaS applications presents a critical challenge: ensuring robust access control that isolates tenant data and operations while maintaining flexibility and scalability. 🚀 **We’ve released some new features, which provide a powerful toolkit to define and enforce multi-tenant security effectively.** **Feel free to check out our [blog post on the topic for more details](/content/blog/multi-tenant-saas-authorization-role-policies-and-scoped-resource-policies ""/index.html).** _In it, we:_ • _Go through key Cerbos concepts: Scopes, role policies, and scoped resource policies with scope permission modes._ • _Demonstrate how these features combine to address the multi-tenant access control problem._ • _Provide practical policy examples for a hypothetical SaaS HR platform._ 🚀 2 💪 2 cerbie 2 a Anna Paykina 05/30/2025, 5:42 AM Hey everyone, happy Friday! ☺️ **We’re excited to share our latest success story with you all: “ [How Cerbos gave Utility Warehouse control over 4,500 services and millions of NHIs](/content/customers/utility-warehouse/non-human-identities ""/index.html)”** Utility Warehouse, a FTSE 250 company, faced a growing challenge common in modern infrastructures: managing and securing Non-Human Identities across a vast network of over 4,500 services. As systems scale, NHIs like service accounts and workloads identities can proliferate, leading to overprivileged access and reduced visibility if not properly controlled. By implementing Cerbos, Utility Warehouse transitioned to a true Zero Trust architecture, achieving: 🔹 𝐆𝐫𝐚𝐧𝐮𝐥𝐚𝐫 𝐍𝐇𝐈 𝐚𝐜𝐜𝐞𝐬𝐬 𝐜𝐨𝐧𝐭𝐫𝐨𝐥. Securing access at every hop within their service mesh, moving beyond perimeter-only trust. 🔹 𝐄𝐧𝐝-𝐭𝐨-𝐞𝐧𝐝 𝐢𝐝𝐞𝐧𝐭𝐢𝐭𝐲 𝐩𝐫𝐨𝐩𝐚𝐠𝐚𝐭𝐢𝐨𝐧. Ensuring user identity and intent are maintained throughout the service chain for full-context authorization. 🔹 𝐒𝐜𝐚𝐥𝐚𝐛𝐥𝐞 & 𝐬𝐭𝐚𝐭𝐞𝐥𝐞𝐬𝐬 𝐩𝐨𝐥𝐢𝐜𝐢𝐞𝐬. Efficiently managing millions of authorization decisions daily across their extensive service landscape. 🔹 𝐂𝐨𝐦𝐩𝐫𝐞𝐡𝐞𝐧𝐬𝐢𝐯𝐞 𝐚𝐮𝐝𝐢𝐭 & 𝐨𝐛𝐬𝐞𝐫𝐯𝐚𝐛𝐢𝐥𝐢𝐭𝐲. Leveraging integrated audit logging for enhanced threat detection and compliance. This strategic implementation not only bolstered their security posture but also streamlined operations, reclaiming significant development time. Kudos Rob Crowe and the Utility Warehouse team for their forward-thinking approach to securing NHIs at scale! 👍 2 🌟 2 🚀 3 🙌 2 GitHub 06/03/2025, 2:39 AM [Release - v0.44.0](https://github.com/cerbos/cerbos/releases/tag/v0.44.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.44.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.44.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.44.0.html "") \## Changelog \### Features • [b383622](https://github.com/cerbos/cerbos/commit/b383622148c4c1c84bf147dbf04778f115b6fa01 "") feat(audit): Add size-based batch limiting to audit log hub ( [#2558](https://github.com/cerbos/cerbos/pull/2558 "")) • [350d52c](https://github.com/cerbos/cerbos/commit/350d52c45f7600218e859ea62885ff846299ad5a "") feat(plan): Add support for multiple actions ( [#2543](https://github.com/cerbos/cerbos/pull/2543 "")) • [ff44bd4](https://github.com/cerbos/cerbos/commit/ff44bd4d327584ce9f9e56965486f89f4d7723cf "") feat: Add principal policy support to rule table ( [#2544](https://github.com/cerbos/cerbos/pull/2544 "")) • [44e21fb](https://github.com/cerbos/cerbos/commit/44e21fbc30fda12c3a24f48a1704a3f7449ce680 "") feat: Cerbosctl commands to interact with Hub store ( [#2569](https://github.com/cerbos/cerbos/pull/2569 "")) \### Enhancements • [666976c](https://github.com/cerbos/cerbos/commit/666976c05768dbfb9fb05f0a5be6f53bfcdfac06 "") enhancement!: Remove bundle version configuration parameter ( [#2583](https://github.com/cerbos/cerbos/pull/2583 "")) • [386230a](https://github.com/cerbos/cerbos/commit/386230a2c7ba9f9e4697910a70f6c8dcdc93e64a "") enhancement(helm): Update helm charts to support bundle v2 ( [#2580](https://github.com/cerbos/cerbos/pull/2580 "")) • [a2b376b](https://github.com/cerbos/cerbos/commit/a2b376b4437c1e9cc072314ed3d391672071a4dc "") enhancement: Simplify plan with exists operation ( [#2570](https://github.com/cerbos/cerbos/pull/2570 "")) \### Bug fixes • [42fd48b](https://github.com/cerbos/cerbos/commit/42fd48bd444ab5d2b2256a4db0956243e4499dd6 "") fix(helm): Set correct environment variable to configure traces sampler ( [#2551](https://github.com/cerbos/cerbos/pull/2551 "")) • [86428c7](https://github.com/cerbos/cerbos/commit/86428c778b8c3f56eebb1f13c1e7e0ddfded2553 "") fix(plan): Preserve action field for auditing ( [#2564](https://github.com/cerbos/cerbos/pull/2564 "")) • [861bb1d](https://github.com/cerbos/cerbos/commit/861bb1d272d2dd620080b94f33538d0049ebc95a "") fix: Return appropriate backoff in logcap ingest error path ( [#2549](https://github.com/cerbos/cerbos/pull/2549 "")) \### Documentation • [314535a](https://github.com/cerbos/cerbos/commit/314535a749fead88583a25e5a1dce28dddf15a64 "") docs: Add talk to engineer link ( [#2573](https://github.com/cerbos/cerbos/pull/2573 "")) \### Chores • [380d8f6](https://github.com/cerbos/cerbos/commit/380d8f6553a2dccfbd52b8a91823d06231799485 "") chore(ci): Don't bother caching dependencies for ``` upload-test-times ``` job ( [#2557](https://github.com/cerbos/cerbos/pull/2557 "")) • [d4e6db6](https://github.com/cerbos/cerbos/commit/d4e6db66ecf9777f173ee12a296e8e4cc10b33a1 "") chore(ci): Upgrade Helm and Helmfile ( [#2586](https://github.com/cerbos/cerbos/pull/2586 "")) • [73d0e25](https://github.com/cerbos/cerbos/commit/73d0e25e2571f9a43b8e87756db186dc8d19c6b0 "") chore(deps)!: Update module [github.com/cenkalti/backoff/v4](http://github.com/cenkalti/backoff/v4 "") to v5 ( [#2555](https://github.com/cerbos/cerbos/pull/2555 "")) • [db07dcb](https://github.com/cerbos/cerbos/commit/db07dcb052031cd6f1b8f1403e093ad28e5154c1 "") chore(deps): Bump [github.com/go-jose/go-jose/v4](http://github.com/go-jose/go-jose/v4 "") from 4.0.4 to 4.0.5 ( [#2563](https://github.com/cerbos/cerbos/pull/2563 "")) • [aedf313](https://github.com/cerbos/cerbos/commit/aedf313877acc3af1cd027fa5ab454b8f74c57bd "") chore(deps): Bump [golang.org/x/net](http://golang.org/x/net "") from 0.37.0 to 0.38.0 in /api/genpb ( [#2559](https://github.com/cerbos/cerbos/pull/2559 "")) • [e5ad74e](https://github.com/cerbos/cerbos/commit/e5ad74ea4d65f3d201830f365a7e52101c120588 "") chore(deps): Bump [helm.sh/helm/v3](http://helm.sh/helm/v3 "") from 3.16.4 to 3.17.3 in /tools ( [#2545](https://github.com/cerbos/cerbos/pull/2545 "")) • [1e6d83c](https://github.com/cerbos/cerbos/commit/1e6d83cc6022a03617338a72dfb3ade2d839b4a1 "") chore(deps): Update dawidd6/action-download-artifact action to v10 ( [#2585](https://github.com/cerbos/cerbos/pull/2585 "")) • [61ba507](https://github.com/cerbos/cerbos/commit/61ba507010930c3af0a9bf4c5259d78f72c4a4e1 "") chore(deps): Update dawidd6/action-download-artifact action to v9 ( [#2548](https://github.com/cerbos/cerbos/pull/2548 "")) • [39c082b](https://github.com/cerbos/cerbos/commit/39c082bedd0adf0459c690d3ed3ad515e6831383 "") chore(deps): Update extractions/setup-just action to v3 ( [#2552](https://github.com/cerbos/cerbos/pull/2552 "")) • [44b2b26](https://github.com/cerbos/cerbos/commit/44b2b26df7b4422c238a03b66be66dacce873263 "") chore(deps): Update go deps ( [#2547](https://github.com/cerbos/cerbos/pull/2547 "")) • [97f9326](https://github.com/cerbos/cerbos/commit/97f9326ed202171b7da3110319a2beb9fa985567 "") chore(deps): Update go deps ( [#2565](https://github.com/cerbos/cerbos/pull/2565 "")) • [b04997c](https://github.com/cerbos/cerbos/commit/b04997ca92cf3200c1215e2e45e4c2f41390505c "") chore(deps): Update go deps ( [#2571](https://github.com/cerbos/cerbos/pull/2571 "")) • [e7cbf2d](https://github.com/cerbos/cerbos/commit/e7cbf2dafc8326c8c5d1d0424a14f4bd050c37c3 "") chore(deps): Update go deps ( [#2576](https://github.com/cerbos/cerbos/pull/2576 "")) • [1fa3df6](https://github.com/cerbos/cerbos/commit/1fa3df6faf2f139cd50f350c9ebfa95d169856a2 "") chore(deps): Update go deps ( [#2581](https://github.com/cerbos/cerbos/pull/2581 "")) • [672f97e](https://github.com/cerbos/cerbos/commit/672f97e58767086750079bc33adca972f4597d2c "") chore(deps): Update go deps ( [#2584](https://github.com/cerbos/cerbos/pull/2584 "")) • [53314ec](https://github.com/cerbos/cerbos/commit/53314ec2cf52cf7c811447450ddc864925fe9989 "") chore(deps): Update golangci/golangci-lint-action action to v7.0.1 ( [#2566](https://github.com/cerbos/cerbos/pull/2566 "")) • [efca0ba](https://github.com/cerbos/cerbos/commit/efca0ba5f82826d3e04ffcf83f1df69a52fcd865 "") chore(deps): Update module [helm.sh/helm/v3](http://helm.sh/helm/v3 "") to v3.17.3 \[security\] ( [#2546](https://github.com/cerbos/cerbos/pull/2546 "")) • [537dc04](https://github.com/cerbos/cerbos/commit/537dc04fb4724f270c90f810b9cbe35c6e4b3d96 "") chore(deps): Update modules [github.com/lestrrat-go/jwx](http://github.com/lestrrat-go/jwx "") and [github.com/vektra/mockery](http://github.com/vektra/mockery "") to v3 (major) ( [#2553](https://github.com/cerbos/cerbos/pull/2553 "")) • [0e39c79](https://github.com/cerbos/cerbos/commit/0e39c79ccaa4f4636effec67438b5bd553cc5632 "") chore(deps): Update node.js deps ( [#2562](https://github.com/cerbos/cerbos/pull/2562 "")) • [5e2be4d](https://github.com/cerbos/cerbos/commit/5e2be4d0fff95b5d01b4351e1247fb4c16573062 "") chore(deps): Update node.js deps ( [#2575](https://github.com/cerbos/cerbos/pull/2575 "")) • [d89540e](https://github.com/cerbos/cerbos/commit/d89540e1aeed7c36ce45f681ec496cb18eba2b07 "") chore(deps): Update node.js deps ( [#2582](https://github.com/cerbos/cerbos/pull/2582 "")) • [293307a](https://github.com/cerbos/cerbos/commit/293307a9aa3a31b12e86969c3f83253d0970ad3e "") chore(deps): Update pnpm to v10.10.0 ( [#2572](https://github.com/cerbos/cerbos/pull/2572 "")) • [e657267](https://github.com/cerbos/cerbos/commit/e6572676842fce6e6fc5615a9c366332eb38ece6 "") chore(deps): Update sigstore/cosign-installer action to v3.8.2 ( [#2561](https://github.com/cerbos/cerbos/pull/2561 "")) • [4b7b60c](https://github.com/cerbos/cerbos/commit/4b7b60cc2e55f2efa48c4e36143aaeda2fe1e81b "") chore(deps): update go deps ( [#2560](https://github.com/cerbos/cerbos/pull/2560 "")) • [ccf551a](https://github.com/cerbos/cerbos/commit/ccf551a8a52903cdda4567e905894a8f19669ba2 "") chore(deps): update module [github.com/golangci/golangci-lint](http://github.com/golangci/golangci-lint "") to v2 ( [#2556](https://github.com/cerbos/cerbos/pull/2556 "")) • [c35ae86](https://github.com/cerbos/cerbos/commit/c35ae86a53c05ac6e7a7eb4378d4edc9b9c594c6 "") chore(deps): update node.js deps ( [#2539](https://github.com/cerbos/cerbos/pull/2539 "")) • [9508a38](https://github.com/cerbos/cerbos/commit/9508a38c6ec073bc7ff29ac2229ac1c26ebaab3e "") chore(docs): Fix how less than or equal operator is displayed (! 🎉 📖 We’re excited to share **[our new ebook “Securing Non-Human Identities in enterprise systems”](https://solutions.cerbos.dev/securing-ai-agents-non-human-identities-in-enterprises "")** This ebook breaks down: • NHI taxonomy • 20 NHI and AI agent risk vectors you need to know • 12 security principles and 35 actionable steps for NHI governance • Insights from NHI breaches (Okta, GitHub, and Microsoft) • Expert opinions from CISOs, security architects, and EMs working on IAM programs that include NHI security • A vendor landscape and evaluation checklist to guide your implementation strategy It’s actionable and built from real-world experience, designed to help IAM teams address the blind spots, over-permissioning, and security gaps that often come with AI agents, microservices, and automated workloads. Feel free to read the ebook and let us know what you think! 🌟 1 📚 3 🙌 3 👍 2 a Anna Paykina 06/06/2025, 7:32 AM Happy Friday, community 😊 We wanted to share our **case study with BarrierSystems** with you! [“BarrierSystems integrates Cerbos into smart vehicle access gates, cutting internal costs by 15%”](/content/customers/barriersystems ""/index.html) The company used Cerbos to externalize authorization for easier policy management. As a result, they were able to: • Improve user experience, with a 15% decrease in customer issues • Simplify their own policy management workflows to enable consistent and reliable access control for their customers • Decrease associated internal costs by 15% as a result • Ship new features faster 🌟 3 🚀 3 👏 2 cerbie 2 🙌 3 🧠 3 GitHub 06/16/2025, 10:09 AM [Release - v0.45.0](https://github.com/cerbos/cerbos/releases/tag/v0.45.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.45.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.45.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.45.0.html "") \## Changelog \### Bug fixes • [07adb2b](https://github.com/cerbos/cerbos/commit/07adb2b623beef664bd5b51f3ab1e897d7e88147 "") fix: Handle multi-role planner precedence correctly ( [#2592](https://github.com/cerbos/cerbos/pull/2592 "")) • [adf9207](https://github.com/cerbos/cerbos/commit/adf9207cfe9992d69bc1c3171b9786f8a7ce0973 "") fix: Honour compile cache duration in rule table ( [#2602](https://github.com/cerbos/cerbos/pull/2602 "")) • [1fd9668](https://github.com/cerbos/cerbos/commit/1fd9668427b76c9536c3dffa37e226ad378ab8d5 "") fix: Protect against wildcards in policy names ( [#2593](https://github.com/cerbos/cerbos/pull/2593 "")) \### Chores • [7fa8846](https://github.com/cerbos/cerbos/commit/7fa8846cdfb522065431c8c736ab966f036423f7 "") chore(ci): Remove deprecated ``` buf ``` actions ( [#2604](https://github.com/cerbos/cerbos/pull/2604 "")) • [201601e](https://github.com/cerbos/cerbos/commit/201601ea2e38c77fa70122bc5c7c50ce0d080bdb "") chore(deps): Bump brace-expansion from 2.0.1 to 2.0.2 in /npm/test/registry ( [#2597](https://github.com/cerbos/cerbos/pull/2597 "")) • [abd1192](https://github.com/cerbos/cerbos/commit/abd1192bfdb62a2db92c4da29181723a9aa2a153 "") chore(deps): Update cerbos-sdk-go to 0.3.4 ( [#2606](https://github.com/cerbos/cerbos/pull/2606 "")) • [cbd9efd](https://github.com/cerbos/cerbos/commit/cbd9efd7e5d0fd88791e97fcb558e7a0c60bdd00 "") chore(deps): Update cerbos-sdk-go to v0.3.2 ( [#2589](https://github.com/cerbos/cerbos/pull/2589 "")) • [f5d113e](https://github.com/cerbos/cerbos/commit/f5d113ea7a5add5b93b8fed5afc52a8c0a115baf "") chore(docs): Fix mistake related to compile.cacheSize configuration parameter ( [#2598](https://github.com/cerbos/cerbos/pull/2598 "")) • [2a65d5b](https://github.com/cerbos/cerbos/commit/2a65d5b4374528dee71cb5f1301f84d540bddee5 "") chore(release): Add 0.45.0 release notes ( [#2605](https://github.com/cerbos/cerbos/pull/2605 "")) • [eb97869](https://github.com/cerbos/cerbos/commit/eb978691e10c8d66c44eb6373824f1c64da7e7b9 "") chore(release): Prepare release 0.45.0 • [6af3f42](https://github.com/cerbos/cerbos/commit/6af3f42db601aa505ad9cf26f3a5e39fc7b6d708 "") chore(tracing): Fix names of tracing spans in engine ( [#2603](https://github.com/cerbos/cerbos/pull/2603 "")) • [ee97a59](https://github.com/cerbos/cerbos/commit/ee97a590af25d2d4ec04214abf64e9ab38ae11dc "") chore(version): Bump version to 0.45.0 • [9e24d95](https://github.com/cerbos/cerbos/commit/9e24d95de72de2686c7ca8cfb30640ed5c783529 "") chore: More ASCII character class replacements ( [#2596](https://github.com/cerbos/cerbos/pull/2596 "")) • [70c77ab](https://github.com/cerbos/cerbos/commit/70c77ab560f52e0f351faf564290f24f331ea36a "") chore: Replace ASCII character classes in validation regexes ( [#2595](https://github.com/cerbos/cerbos/pull/2595 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 06/18/2025, 10:21 AM Hey ! We wanted to share our latest blog with you, in which we explore two approaches to implementing 💡 **hierarchy-based permissions** in Cerbos, inspired by a real-world use case for a data analytics platform. Both methods leverage ABAC, but differ in their implementation strategy: 1️⃣ Policy-defined roles with attribute-based conditions. Defining explicit role policies for each tenant where hierarchical logic is hardcoded inside the policy. 2️⃣ Dynamic, attribute-driven generic policies. Shifting the hierarchical conditions entirely to the principal’s attributes and using a single, generic policy for interpretation. [Feel free to check out the details here](/content/blog/mastering-hierarchy-based-permissions-with-cerbos-policy-defined-roles-vs-dynamic-attributes ""/index.html) 👍 1 🧠 1 GitHub 06/30/2025, 7:22 AM [Release - v0.45.1](https://github.com/cerbos/cerbos/releases/tag/v0.45.1 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.45.1 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.45.1.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.45.1.html "") \## Changelog \### Bug fixes • [6808dae](https://github.com/cerbos/cerbos/commit/6808dae9ef6c41093f51c93dc6d09d8f4931304a "") fix: Don't set bundleVersion when auto-configuring hub ( [#2608](https://github.com/cerbos/cerbos/pull/2608 "")) \### Documentation • [a4f2eea](https://github.com/cerbos/cerbos/commit/a4f2eea2a8adfb118f5a3b890035d6aeeb048720 "") docs: Generate llm.txt and llm-full.txt ( [#2609](https://github.com/cerbos/cerbos/pull/2609 "")) \### Chores • [b0cc825](https://github.com/cerbos/cerbos/commit/b0cc825729e2deb2cf81b64693804ce6c3bcb9d0 "") chore(ci): Fix ``` buf push ``` step ( [#2610](https://github.com/cerbos/cerbos/pull/2610 "")) • [70766ee](https://github.com/cerbos/cerbos/commit/70766eeac48db2f9056c3a5472a499cf4db9ee77 "") chore(deps): Bump [github.com/go-chi/chi/v5](http://github.com/go-chi/chi/v5 "") from 5.2.1 to 5.2.2 in /tools ( [#2611](https://github.com/cerbos/cerbos/pull/2611 "")) • [549e877](https://github.com/cerbos/cerbos/commit/549e8772306d1860837387192d8a2b75bd3f2152 "") chore(deps): Bump [github.com/go-viper/mapstructure/v2](http://github.com/go-viper/mapstructure/v2 "") from 2.1.0 to 2.3.0 ( [#2618](https://github.com/cerbos/cerbos/pull/2618 "")) • [7893eaf](https://github.com/cerbos/cerbos/commit/7893eaf91a0666331bf0711a0354028389b5acf3 "") chore(deps): Update go deps ( [#2612](https://github.com/cerbos/cerbos/pull/2612 "")) • [46458b5](https://github.com/cerbos/cerbos/commit/46458b5c935b07ace1d4bfc4c9ff90f4e1c22fb0 "") chore(deps): Update go deps ( [#2619](https://github.com/cerbos/cerbos/pull/2619 "")) • [3de8602](https://github.com/cerbos/cerbos/commit/3de8602f1f1d4b5b8cc312c5522e8e59e046bb0f "") chore(deps): Update node.js deps ( [#2613](https://github.com/cerbos/cerbos/pull/2613 "")) • [05e9783](https://github.com/cerbos/cerbos/commit/05e97833b3da0d2f847ca091858ba56ce0ceb6a9 "") chore(deps): Update node.js deps ( [#2620](https://github.com/cerbos/cerbos/pull/2620 "")) • [6194038](https://github.com/cerbos/cerbos/commit/619403841b7bd7605270624efca1c5f013521f42 "") chore(release): Add 0.45.1 release notes ( [#2621](https://github.com/cerbos/cerbos/pull/2621 "")) • [47732be](https://github.com/cerbos/cerbos/commit/47732be991a580ad905960a94028d4153668e4cb "") chore(release): Prepare release 0.45.1 • [d9f01f8](https://github.com/cerbos/cerbos/commit/d9f01f838e73df28e8b4895ee18d15361564b2c7 "") chore(version): Bump version to 0.46.0 • [98d3145](https://github.com/cerbos/cerbos/commit/98d31453522dadc19223b3a3aaeb8b03718bc71a "") chore: Pluggable schema resolver ( [#2614](https://github.com/cerbos/cerbos/pull/2614 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") 🔧 1 a Anna Paykina 07/02/2025, 7:10 AM hey ! 🙂 MCP servers are reshaping how AI agents interact with external tools and APIs. They unlock speed and flexibility, but can also punch holes in your security model if every agent can call every tool by default. Which why we are excited to share our [guide on implementing dynamic authorization for AI agents and fine-grained permissions in MCP servers](/content/blog/dynamic-authorization-for-ai-agents-guide-to-fine-grained-permissions-mcp-servers ""/index.html) (and it doesn’t require a backend rewrite 😊). cerbie 4 👍 5 💡 4 a Anna Paykina 07/08/2025, 9:07 AM Hello, ! We’re excited to share our latest ebook with you: 📘 **The “How to adopt externalized authorization: Planning your path”!** Over the years, we’ve worked with hundreds of engineering, IAM, and security teams - helping everyone from early-stage startups to global enterprises navigate the process of adopting externalized authorization. That experience became the foundation for our new ebook. It’s a hands-on, 10-chapter guide that walks through every stage of the journey, from foundational planning to externalized authorization rollout and long-term governance. [If you’re interested, feel free to download it here.](https://solutions.cerbos.dev/how-to-adopt-externalized-authorization "") Let us know what you think once you have a chance to read it! 🙌 🌟 5 🎉 4 cerbie 4 📚 4 a Anna Paykina 07/15/2025, 2:03 PM Hey, 👋 Exciting news - Cerbos documentation is now LLM optimized! Use your favorite AI assistant to help build Cerbos policies and integrations. [Check out the details here.](/content/blog/llm-understanding-of-cerbos-documentation ""/index.html) 🙌 3 cerbie 5 🤖 8 cerbos 3 🙌🏼 1 a Anna Paykina 07/17/2025, 11:10 AM Hey ! We have a really big update today 😊 We’re very excited to share that we have 🚀🎉 **just released the [updated Cerbos Hub](/content/blog/four-new-use-cases-in-updated-cerbos-hub ""/index.html)!** Cerbos Hub is now the centralized control plane for every authorization decision across applications, AI agents, services, and workloads. **All identities. Any architecture at any scale. All in one place.** This update is the result of your feedback. Over the past year, hundreds of engineering and security teams shared their challenges, and this input shaped four powerful new use cases: 1\. Fine-grained, tenant specific authorization 2\. Dynamic policy management at scale 3\. Scalable NHI permission management 4\. Secure authorization for MCP servers This latest update brings new features across the entire authorization lifecycle. So now you can: • Create, update, and deploy policies programmatically • Scale your policies by tenant, team, environment, or use case with the new Policy Stores • Push and deploy policy updates from any Git provider, CI tool, or API, with real-time distribution and built-in testing • Get a complete audit trail of every access decision across all identities, tenants, and apps • [And much more](/content/blog/updated-cerbos-hub-complete-authorization-solution-for-your-identity-fabric ""/index.html)! If you haven’t tried Cerbos Hub yet, and you’re looking to manage authorization for every identity in your system with full visibility, consistent policy enforcement, and Zero Trust alignment - **this is the time to check it out** 🙂 We’re happy to walk you through the new features and explore how they can meet your requirements. Our engineer and Head of Product are happy [to talk with you](/content/workshop ""/index.html)! 🌟 6 cerbie 7 🙌 6 💫 5 🙌🏻 1 🚀 9 💥 3 a Anna Paykina 07/18/2025, 10:51 AM Happy Friday, community! We’re back with some more fun news! 😊 We are excited to share that **Cerbos Hub** has been named [Best in Microservices Infrastructure at the 2025 API Awards](/content/news/cerbos-2025-api-award-best-in-microservices-infrastructure ""/index.html)! 🥇 Thank you for your continued support, and for being on this journey with us! 🌟 2 🥇 1 🚀 3 👏 2 🏆 2 l Lisa Dziuba 07/22/2025, 10:34 AM Hello, our awesome community! Do you want to learn best practices for multi-tenant authorization? **Join our spotlight webinar on Jul 29 to see how to model and manage per-tenant access policies.** Together with our CPO, **@Alex Olivier (Cerbos)**, we’ll cover: • Real-world implementation examples • How to build tenant-specific Policy Stores with isolation and traceability • The architecture needed to scale per-tenant authorization • Supporting enterprise customers with custom roles and dynamic logic • Live demo of policy creation, deployment, and updates via API and Git Register here → [https://zoom.us/webinar/register/WN\_-U732lkoQLOdaCCyasJ\_ag%20#/registration](https://zoom.us/webinar/register/WN_-U732lkoQLOdaCCyasJ_ag%20#/registration "") cerbie 1 👀 1 🎉 1 a Anna Paykina 07/31/2025, 9:48 AM Hey everyone 👋 We wanted to let you know about our next upcoming webinar, where we will dive into **programmatic policy management for complex systems.** We’ve heard from a number of you about issues with scaling manual permission updates. As your system grows with more tenants, services, and agents, keeping access control up to date gets messy. If you’d like to learn how to manage permission updates with code, join us on **August 6.** We’ll go through: • When to use programmatic updates (and when not to) • Static vs. dynamic policy models • Managing policies via CLI, API, and SDKs • Deploying from Git, CI, or external systems • Architectures for scaling real-time policy updates • Live demo: building dynamic policies and integrating with your systems **You can register here** ➡️ **[https://zoom.us/webinar/register/5317539696581/WN\_SOGae5oqTSaJu28uiogCqA](https://zoom.us/webinar/register/5317539696581/WN_SOGae5oqTSaJu28uiogCqA "")** 💡 2 cerbie 2 👍 2 🚀 2 GitHub 08/01/2025, 2:13 AM [Release - v0.46.0](https://github.com/cerbos/cerbos/releases/tag/v0.46.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.46.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.46.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.46.0.html "") \## Changelog \### Features • [6cff78d](https://github.com/cerbos/cerbos/commit/6cff78d4ed671fc690b6eba0d75c4995d8a3197b "") feat: Include policy source in audit logs ( [#2624](https://github.com/cerbos/cerbos/pull/2624 "")) \### Enhancements • [e73ec4c](https://github.com/cerbos/cerbos/commit/e73ec4c2059ad964681f09930ae6bc165901ef63 "") enhancement: Add embedded PDP metadata to audit logs ( [#2625](https://github.com/cerbos/cerbos/pull/2625 "")) • [8b4cbe3](https://github.com/cerbos/cerbos/commit/8b4cbe3ca556fbfa7b8ecd5b1aa48e8d96ca1e43 "") enhancement: Stickier PDP IDs ( [#2641](https://github.com/cerbos/cerbos/pull/2641 "")) \### Bug fixes • [8184fdf](https://github.com/cerbos/cerbos/commit/8184fdf382f14705f51857c2e82d76cb70382e0a "") fix: Handle const false DENY nodes in role-level query planning ( [#2644](https://github.com/cerbos/cerbos/pull/2644 "")) • [3b2f73c](https://github.com/cerbos/cerbos/commit/3b2f73c7b67df20b6083012cb04530f0fbc9b1d4 "") fix: Handle rule-less policies for multi-tenant fallthrough ( [#2649](https://github.com/cerbos/cerbos/pull/2649 "")) \### Documentation • [ede245a](https://github.com/cerbos/cerbos/commit/ede245ae0aa1a00585aa1681e8f0a39160ac14b0 "") docs: Fix css for logo on hover ( [#2628](https://github.com/cerbos/cerbos/pull/2628 "")) \### Chores • [3531121](https://github.com/cerbos/cerbos/commit/3531121e1a3086cfe1e9330fa3eee838d74a5e0d "") chore(ci): Set MySQL tag ( [#2647](https://github.com/cerbos/cerbos/pull/2647 "")) • [084ad71](https://github.com/cerbos/cerbos/commit/084ad71e6f4b8dbedf1e39e969dea2994da0a09c "") chore(ci): Temporarily disable MySQL E2E tests ( [#2650](https://github.com/cerbos/cerbos/pull/2650 "")) • [445ca4e](https://github.com/cerbos/cerbos/commit/445ca4e798dc92250cceb7885b0e99d44fd08bc5 "") chore(ci): Use official MySQL image in E2E tests ( [#2646](https://github.com/cerbos/cerbos/pull/2646 "")) • [616d48d](https://github.com/cerbos/cerbos/commit/616d48de1a7a43146308b26ef24904ab1a4fccce "") chore(deps): Bump form-data from 4.0.2 to 4.0.4 in /npm/test/registry ( [#2654](https://github.com/cerbos/cerbos/pull/2654 "")) • [e12847a](https://github.com/cerbos/cerbos/commit/e12847a970ae0d4def87082b82f23decb5019497 "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 28.2.2+incompatible to 28.3.3+incompatible in /tools ( [#2655](https://github.com/cerbos/cerbos/pull/2655 "")) • [15b5edf](https://github.com/cerbos/cerbos/commit/15b5edfdf4d5e6919c25bb393f1f10539bf03e23 "") chore(deps): Bump [helm.sh/helm/v3](http://helm.sh/helm/v3 "") from 3.17.3 to 3.18.4 in /tools ( [#2632](https://github.com/cerbos/cerbos/pull/2632 "")) • [664315c](https://github.com/cerbos/cerbos/commit/664315cd4eac6ec22349bc0b2cb9b875ab3884dc "") chore(deps): Update github actions deps ( [#2642](https://github.com/cerbos/cerbos/pull/2642 "")) • [149a57d](https://github.com/cerbos/cerbos/commit/149a57dac002606bed4140e35379977cb7bbfa11 "") chore(deps): Update go deps ( [#2626](https://github.com/cerbos/cerbos/pull/2626 "")) • [4abe304](https://github.com/cerbos/cerbos/commit/4abe304dae2ecea178a65360a49b43c6d7990deb "") chore(deps): Update go deps ( [#2635](https://github.com/cerbos/cerbos/pull/2635 "")) • [4803489](https://github.com/cerbos/cerbos/commit/4803489786ab41dc0515b416f9895fe6fcb41f10 "") chore(deps): Update go deps ( [#2643](https://github.com/cerbos/cerbos/pull/2643 "")) • [ded17ae](https://github.com/cerbos/cerbos/commit/ded17ae679bd1fe87b06f959b21e4089a8c9e46f "") chore(deps): Update go deps ( [#2651](https://github.com/cerbos/cerbos/pull/2651 "")) • [8629867](https://github.com/cerbos/cerbos/commit/86298678275de1c2e8f8f69d04ef9486320c98cf "") chore(deps): Update node.js deps ( [#2652](https://github.com/cerbos/cerbos/pull/2652 "")) • [3b6b8d3](https://github.com/cerbos/cerbos/commit/3b6b8d32c35747673762c7585884643c44baaec4 "") chore(deps): Update pnpm to v10.13.1 ( [#2636](https://github.com/cerbos/cerbos/pull/2636 "")) • [1b3690b](https://github.com/cerbos/cerbos/commit/1b3690b2c770963236ca05d5e9ef1f4b40ff39fa "") chore(deps): Update sigstore/cosign-installer action to v3.9.1 ( [#2627](https://github.com/cerbos/cerbos/pull/2627 "")) • [1a130aa](https://github.com/cerbos/cerbos/commit/1a130aa54baa7fc43133548743712380df159c13 "") chore(deps): update module [helm.sh/helm/v3](http://helm.sh/helm/v3 "") to v3.18.4 \[security\] ( [#2633](https://github.com/cerbos/cerbos/pull/2633 "")) • [031a3c5](https://github.com/cerbos/cerbos/commit/031a3c556ca6a8bc818ad8b85b540c2a55e36450 "") chore(release): Add 0.46.0 release notes ( [#2657](https://github.com/cerbos/cerbos/pull/2657 "")) • [2e55b6b](https://github.com/cerbos/cerbos/commit/2e55b6b7edce383e84f044d9d014b9735e934b23 "") chore(release): Prepare release 0.46.0 • [17d8000](https://github.com/cerbos/cerbos/commit/17d8000a97bc5a4b8413daa81740dfa5f4bcd3e1 "") chore(version): Bump version to 0.46.0 • [17e74dc](https://github.com/cerbos/cerbos/commit/17e74dc5fc3b17594c7cac4a096f8600bbf0b81c "") chore: Enable gzip and increase response size limit for cerbosctl ( [#2631](https://github.com/cerbos/cerbos/pull/2631 "")) • [4b09afc](https://github.com/cerbos/cerbos/commit/4b09afcea5852ce4b900b0d5b819670dcd8e40f7 "") chore: Rename cerbosctl hub ``` like ``` filter to ``` contains ``` ( [#2623](https://github.com/cerbos/cerbos/pull/2623 "")) • [e8e7a86](https://github.com/cerbos/cerbos/commit/e8e7a8673894433e05bfefc2e7604c747bb76326 "") chore: Use new Bitnami repository ( [#2640](https://github.com/cerbos/cerbos/pull/2640 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") 🚀 4 a Anna Paykina 08/04/2025, 12:07 PM hey ! 👋 **We have launched the new Usage Dashboard in Cerbos Hub!** 🙌 This new feature provides a comprehensive, real-time view of your authorization service, allowing you to monitor key metrics, analyze trends, and gain valuable insights into your policies and their consumers. The new usage insights, available on both the workspace homepage and its own dedicated “Usage” section, surface these key metrics into a quick reference dashboard. It provides a detailed breakdown of your Monthly Active Principals (MAPs), decisions, query plans, and more, allowing you to see exactly how your authorization policies are being used. [Details can be found here](/content/blog/cerbos-hub-usage-dashboard ""/index.html). 🙌 4 👀 4 🙌🏻 1 💡 1 🎉 1 a Anna Paykina 08/07/2025, 7:00 AM Hey community! 🔥 During these hot summer days, we’re diving into an even hotter topic: securing MCP servers. If your AI agents are getting smarter and gaining access to tools, APIs, and sensitive systems via the Model Context Protocol, you already know the risks aren’t just theoretical. **Join our free MCP security webinar on August 14:** [https://zoom.us/webinar/register/3017545640027/WN\_lefbNhY7RmimAflP7xbTzg](https://zoom.us/webinar/register/3017545640027/WN_lefbNhY7RmimAflP7xbTzg "") Can’t make it live? No worries - we’ll share the recording afterward. Check out the preview video below where Alex Olivier (our CPO & Co-Founder) gives you a taste of what we’ll cover! 👇 [MCP server security webinar.mp4](https://d2mu86a8belxbg.cloudfront.net/attachments/01060769-2cbc-4ab0-ac72-c9a92e50aeec/2e49889b-9ef7-4456-96f9-12e9a901c852mcp-server-security-webinar.mp4) cerbie 1 🙌 1 💡 1 👍 1 l Lisa Dziuba 08/18/2025, 12:13 PM 🎉 We just passed 4,000 stars on [GitHub](https://github.com/cerbos/cerbos ""). A huge thank you to our amazing community for the support! Who wants to give us star number 4001? 😉 🌟 9 ✨ 3 a Anna Paykina 08/20/2025, 8:09 AM Hey ! 👋 **Our next webinar is diving deep into non-human identity authorization on August 26th.** Most teams have Zero Trust figured out for humans. But their service accounts, API keys, workload identities and agents? Still getting broad permissions. The reality is that Zero Trust architecture is only as strong as how teams handle these machine identities. We’ll start the webinar with the fundamentals (NHI types, common risks) then get into the architecture patterns you need for proper Zero Trust, and fine-grained, method-level authorization **What we’re covering:** • NHI fundamentals and risks • 5 common authentication methods for NHIs • Zero Trust principles applied to NHIs • Fine-grained, method-level authorization for workloads and agents • Delegated authorization and on-behalf-of identity handling • How to unify policies and audits across the stack • We’ll also touch briefly on broader NHI security strategies beyond authorization. \*Register:\* [https://zoom.us/webinar/register/4117556840966/WN\_OHDM3rveSZ-pBD5ApU6gsw](https://zoom.us/webinar/register/4117556840966/WN_OHDM3rveSZ-pBD5ApU6gsw "") Can’t make it live? No worries - register anyway and you’ll get the recording. Looking forward to seeing some familiar faces there! 🚀 🤖 4 👍 3 💡 2 👍🏼 1 a Anna Paykina 09/05/2025, 11:18 AM Happy Friday, community 😊 Excited to share that we have just shipped some new features! Both came directly from customer feedback about debugging and monitoring: 1️⃣ Understanding why specific authorization decisions were made 2️⃣ Getting visibility into usage patterns across multiple teams. [Details can be found here](/content/blog/trace-authorization-decisions-and-track-usage-patterns ""/index.html) _If you’re already using Cerbos Hub, head to the playground to try execution traces or check your dashboard for the new organization view._ _If you’re not using Cerbos Hub yet, you can sign up for free and see both features in action with your own policies._ 🧡 1 👍 1 cerbie 1 👀 1 a Anna Paykina 09/15/2025, 6:56 AM Hey everyone, hope your week is off to a good start! We just published a **technical guide on [making application authorization context-aware with Cerbos outputs](/content/blog/making-application-authorization-context-aware-cerbos-outputs ""/index.html)** 📃 If you’ve ever had users confused by cryptic “access denied” messages, or struggled with audit trails that only tell you _what_ happened but not _why -_ this guide could be relevant for you. Cerbos outputs solve the above by providing contextual metadata that transforms binary allow/deny decisions into intelligent, actionable authorization responses. 👍 2 cerbos 2 🙌 1 a Anna Paykina 09/22/2025, 6:59 AM Happy Monday, community 😊 **We just published a guide on [how to write schemas](/content/blog/making-cerbos-policies-bulletproof-with-schemas ""/index.html).** Why care about schemas? Well, when you write Cerbos policies, you’re essentially making assumptions about the shape of data your application will send. Without schemas, those assumptions are just that: assumptions. Your policies become a house of cards waiting for the wrong payload to knock everything down. With schemas in place: • You can catch integration errors during testing, not in production; • Get documentation that can’t lie; • And prevent attribute injection attacks. Feel free to check the blog out, if it’s relevant for you. Have a great week! 🙌 1 👀 1 a Anna Paykina 09/25/2025, 1:41 PM 👋 Some of you have asked **how to filter database results.** So we put together a detailed guide answering that question, the focus of which is the PlanResources API. [You can check it out here](/content/blog/filtering-database-results-with-cerbos-query-plans ""/index.html). 👍 3 💡 1 a Anna Paykina 09/26/2025, 3:52 AM Hey, ! After seeing so many of you registered for our MCP webinar (seriously, the response was amazing!), we knew there was a real appetite for diving deeper into MCP security. So, our co-founder Emre wrote a comprehensive ebook “\*Zero Trust for AI: Securing MCP Servers\*” covering what we couldn’t fit into the webinar: • Why MCP servers are becoming high-privilege security risks • How traditional RBAC fails in AI environments • The PEP/PDP architecture for Zero Trust AI systems • Ready-to-implement authorization policies and deployment patterns The guide draws from our work with customers implementing AI systems and covers real incidents like the recent Supabase and Asana vulnerabilities. Thanks for all the great questions during the webinar - they influenced what went into this guide. Hope you find it helpful for your MCP implementations! **[:books:Get access to the ebook here](https://solutions.cerbos.dev/zero-trust-for-ai-securing-mcp-servers "")** 📖 4 👍 3 🎉 5 ✨ 3 cerbie 1 a Anna Paykina 10/13/2025, 8:37 AM Hey everyone! Some more news on the topic of MCP to start off the week 😊 We are excited to share that 🤖 **we have introduced cerbos-fastmcp middleware.** FastMCP is a popular Python framework for building production-ready Model Context Protocol servers. However, a default FastMCP implementation exposes all tools to all users, creating a significant security risk. The introduced middleware brings policy-based, fine-grained access control to FastMCP deployments. This allows teams to define authorization rules in human-readable YAML policies, completely decoupled from application code. **Check out this blog for the details and a demo: [https://www.cerbos.dev/blog/how-to-secure-your-fast-mcp-server-with-permission-management](/content/blog/how-to-secure-your-fast-mcp-server-with-permission-management ""/index.html)** 👍 2 👀 2 a Anna Paykina 10/17/2025, 10:11 AM Hey everyone 😊 We have a new guide out “ [Zero-Trust for microservices, a practical blueprint](/content/blog/zero-trust-for-microservices ""/index.html)”! If you are moving from monoliths to distributed systems, you’ve likely hit the authorization wall. In the guide, we tackle the critical question modern architectures struggle with: “Is Service A allowed to access Resource X on behalf of User Y?” What we cover: → Why perimeter-based security fails in microservices, and creates lateral movement risks → Implementing workload identity for services, bots, and AI agents → The “on-behalf-of” authorization model for context-aware decisions → Real policy examples for service-to-service authorization and AI agent constraints → Observability through OpenTelemetry integration and centralized audit logs 🙌 3 cerbie 3 ✨ 3 👀 1 a Anna Paykina 10/21/2025, 9:19 AM Hey community 👋 Earlier this year, Cerbos co-founder and CPO [Alex Olivier](https://www.linkedin.com/in/alexolivier/ "") took the stage at DevDays Europe alongside experts Kenneth Rohde Christiansen, Paul Dragoonis, Romano Roth, and Victor Lyuboslavsky to speak on the topic of _“\*Building the Future: Trends in Modern Application Architecture\*”._ They tackled everything from AI’s impact on cloud infrastructure to the perennial microservices vs. monolith debate. If you’re curious, you can check out the [recording and summary write-up here](/content/blog/modern-application-architecture-trends ""/index.html) 👈 😊 💡 2 👍 3 💻 2 a Anna Paykina 10/23/2025, 10:47 AM Hello, everyone ☺️ We just published a new **guide “ [Mapping business requirements to authorization policy for insurance](/content/blog/mapping-business-requirements-to-authorization-policy-for-insurance ""/index.html)”** In it, we explore how authorization helps fight insurance fraud _(which costs the industry $306B annually),_ and break down PBAC examples across auto, life, and property insurance. Complete with Cerbos policies you can use 💻 🙌 2 cerbos 1 GitHub 10/28/2025, 4:42 AM [Release - v0.47.0](https://github.com/cerbos/cerbos/releases/tag/v0.47.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.47.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.47.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.47.0.html "") \## Changelog \### Features • [1b8e12d](https://github.com/cerbos/cerbos/commit/1b8e12dcaebd745a50a7831205ade23615b79bbf "") feat(helm): allow specififying service.trafficDistribution ( [#2693](https://github.com/cerbos/cerbos/pull/2693 "")) • [3ea4971](https://github.com/cerbos/cerbos/commit/3ea497186838a458953c3db093a96f1f826fc58b "") feat: Add AWS Lambda support ( [#2661](https://github.com/cerbos/cerbos/pull/2661 "")) • [ac53850](https://github.com/cerbos/cerbos/commit/ac538502695586043d426d6019b6438ff0d133d2 "") feat: Decouple rule table ( [#2653](https://github.com/cerbos/cerbos/pull/2653 "")) \### Enhancements • [d1e01d8](https://github.com/cerbos/cerbos/commit/d1e01d8c036abb5ebedbb82ef1527257b84b4a4c "") enhancement: Add upload-git cmd and change details from git to replace-files cmd ( [#2695](https://github.com/cerbos/cerbos/pull/2695 "")) • [e82e409](https://github.com/cerbos/cerbos/commit/e82e409917ab76937e9269c9e7608dc2e2c463bd "") enhancement: More detailed schema errors ( [#2663](https://github.com/cerbos/cerbos/pull/2663 "")) • [46bf586](https://github.com/cerbos/cerbos/commit/46bf586c311defd2f4cf58facb40feae42ebfb20 "") enhancement: Use default config if one not provided for Lambda ( [#2728](https://github.com/cerbos/cerbos/pull/2728 "")) \### Bug fixes • [d0edd70](https://github.com/cerbos/cerbos/commit/d0edd7000948e836239e34ad7ebacd65581ff826 "") fix: Batch dependents and deflake CI suites ( [#2677](https://github.com/cerbos/cerbos/pull/2677 "")) • [e89c9cc](https://github.com/cerbos/cerbos/commit/e89c9cc45bb1b7bc51f51f1e330ee6b35124f187 "") fix: Fix e2e blob test by guaranteeing policy existence ( [#2672](https://github.com/cerbos/cerbos/pull/2672 "")) • [0e863bb](https://github.com/cerbos/cerbos/commit/0e863bbb15324908925c852461f4920b08490285 "") fix: Fix e2e overlay test ( [#2671](https://github.com/cerbos/cerbos/pull/2671 "")) • [ce2c68d](https://github.com/cerbos/cerbos/commit/ce2c68da37c009ba34f7d853dcc6ddc91bb8d122 "") fix: Increase blob e2e sleep period ( [#2684](https://github.com/cerbos/cerbos/pull/2684 "")) • [054159c](https://github.com/cerbos/cerbos/commit/054159c84b68590542260f17c01c33c8c7d93082 "") fix: Use CollectT in EventuallyWithT ( [#2685](https://github.com/cerbos/cerbos/pull/2685 "")) \### Documentation • [a9f9af4](https://github.com/cerbos/cerbos/commit/a9f9af4d5254061902dfe8d9b0b4f921c7181b10 "") docs(lambda): Add AWS Lambda docs ( [#2740](https://github.com/cerbos/cerbos/pull/2740 "")) • [2d8e7f6](https://github.com/cerbos/cerbos/commit/2d8e7f68971d256a0d727920f9e142c117899a7c "") docs: Add AI policy to contribution guidelines ( [#2710](https://github.com/cerbos/cerbos/pull/2710 "")) • [353d188](https://github.com/cerbos/cerbos/commit/353d1887cbfe02f8abce5d23a35af204d1f4d9e5 "") docs: Fix broken link in README.md ( [#2658](https://github.com/cerbos/cerbos/pull/2658 "")) • [7cfd150](https://github.com/cerbos/cerbos/commit/7cfd1500073672258ae3733aabffc3da40528524 "") docs: Fix broken links to Hub documentation ( [#2741](https://github.com/cerbos/cerbos/pull/2741 "")) \### Chores • [2f6df1c](https://github.com/cerbos/cerbos/commit/2f6df1c5b535baf85c585301f2a076dabfad8eaa "") chore(ci): Clean up .goreleaser.yml ( [#2670](https://github.com/cerbos/cerbos/pull/2670 "")) • [fdc383f](https://github.com/cerbos/cerbos/commit/fdc383f34e6aff0d78f97a1897c0839b1ea80400 "") chore(ci): Clean up deployment to AWS SAR ( [#2723](https://github.com/cerbos/cerbos/pull/2723 "")) • [9f5baba](https://github.com/cerbos/cerbos/commit/9f5babacb62d43096e601bba94f70ca02f07ec75 "") chore(ci): Clear disk space quicker ( [#2692](https://github.com/cerbos/cerbos/pull/2692 "")) • [26f5ead](https://github.com/cerbos/cerbos/commit/26f5ead255accec2499fe2a6f0229115285cbfa7 "") chore(ci): Increase E2E blob store update interval ( [#2720](https://github.com/cerbos/cerbos/pull/2720 "")) • [a72d22c](https://github.com/cerbos/cerbos/commit/a72d22cd7d0cf9fa99cc829c428a0ec2d7d968d4 "") chore(ci): Move all Minio images to bitnamilegacy ( [#2722](https://github.com/cerbos/cerbos/pull/2722 "")) • [f8559c9](https://github.com/cerbos/cerbos/commit/f8559c9140d46813bbead03d4bfaa3c8e8ac3eea "") chore(ci): Publish AWS Lambda extension to SAR ( [#2719](https://github.com/cerbos/cerbos/pull/2719 "")) • [08ed41a](https://github.com/cerbos/cerbos/commit/08ed41afdde07cba4565a924cf82b53e1fc29143 "") chore(ci): Publish lambda handler to AWS SAR ( [#2707](https://github.com/cerbos/cerbos/pull/2707 "")) • [ada628e](https://github.com/cerbos/cerbos/commit/ada628eb61bff1b5de7f9af5e888ff80b9e011f7 "") chore(ci): Rename lambda release directories for consistency ( [#2725](https://github.com/cerbos/cerbos/pull/2725 "")) • [7cb7f74](https://github.com/cerbos/cerbos/commit/7cb7f742bed8981f69224da1db416673e0f65bae "") chore(ci): Set minimum age for Renovate dependencies ( [#2708](https://github.com/cerbos/cerbos/pull/2708 "")) • [1dca73d](https://github.com/cerbos/cerbos/commit/1dca73d177633d914d8f2563c383e592e7c724b2 "") chore(ci): Test publishing to SAR ( [#2713](https://github.com/cerbos/cerbos/pull/2713 "")) • [6ca5696](https://github.com/cerbos/cerbos/commit/6ca56963f17cd78838b0ea44354a639c37678f8f "") chore(ci): Use faster disk space reclaim action ( [#2694](https://github.com/cerbos/cerbos/pull/2694 "")) • [124d4f8](https://github.com/cerbos/cerbos/commit/124d4f8e8602cf4ccfb61c682c8147c356882420 "") chore(ci): Use legacy Bitnami registry ( [#2721](https://github.com/cerbos/cerbos/pull/2721 "")) • [f6bf465](https://github.com/cerbos/cerbos/commit/f6bf465691dbb48f33019b885de318fba4cd8480 "") chore(deps): Bump [github.com/docker/docker](http://github.com/docker/docker "") from 27.2.0+incompatible to 28.0.0+incompatible ( [#2666](https://github.com/cerbos/cerbos/pull/2666 "")) • [e621d1f](https://github.com/cerbos/cerbos/commit/e621d1fa9b5cf71b72adcee83aff894bf7e24379 "") chore(deps): Bump [github.com/go-viper/mapstructure/v2](http://github.com/go-viper/mapstructure/v2 "") from 2.3.0 to 2.4.0 ( [#2673](https://github.com/cerbos/cerbos/pull/2673 "")) • [8705370](https://github.com/cerbos/cerbos/commit/87053707e7fddc02925a5b320babbf36391c8146 "") chore(deps): Bump [github.com/quic-go/quic-go](http://github.com/quic-go/quic-go "") from 0.54.0 to 0.54.1 in /tools ( [#2731](https://github.com/cerbos/cerbos/pull/2731 "")) • [7848eb4](https://github.com/cerbos/cerbos/commit/7848eb4e001aa9157eb7cf63c309ae3474a0534e "") chore(deps): Bump [github.com/ulikunitz/xz](http://github.com/ulikunitz/xz "") from 0.5.12 to 0.5.14 in /tools ( [#2678](https://github.com/cerbos/cerbos/pull/2678 "")) • [0c1cc42](https://github.com/cerbos/cerbos/commit/0c1cc42835372e68adc5bdebcabdec2a672c703a "") chore(deps): Update Buf dependencies ( [#2737](https://github.com/cerbos/cerbos/pull/2737 "")) • [0bc938c](https://github.com/cerbos/cerbos/commit/0bc938c4af67d94ce2d6d69b11e3f2c7a49148bf "") chore(deps): Update GitHub Actions deps to v5 (major) ( [#2712](https://github.com/cerbos/cerbos/pull/2712 "")) • [86df549](https://github.com/cerbos/cerbos/commit/86df5496def88882d4bd7eef9246c8c035e90af1 "") chore(deps): Update Go deps ( [#2711](https://github.com/cerbos/cerbos/pull/2711 "")) • [27c8dbd](https://github.com/cerbos/cerbos/commit/27c8dbd79a58e8a9d3658e7dba5ae6642d6d3b69 "") chore(deps): Update Go deps ( [#2717](https://github.com/cerbos/cerbos/pull/2717 "")) • [8133849](https://github.com/cerbos/cerbos/commit/813384952ef5208443c51ef7a769dbe0d92926b0 "") chore(deps): Update Go deps ( [#2727](https://github.com/cerbos/cerbos/pull/2727 "")) • [617c1be](https://github.com/cerbos/cerbos/commit/617c1be0b5e270f539bb3b001f6d79da1d36e90c "") chore(deps): Update Go deps ( [#2732](https://github.com/cerbos/cerbos/pull/2732 "")) • [b3dfff0](https://github.com/cerbos/cerbos/commit/b3dfff0b121734346d5b8edf3934d4db983dd552 "") chore(deps): Update Go deps ( [#2739](https://github.com/cerbos/cerbos/pull/2739 "")) • [4094281](https://github.com/cerbos/cerbos/commit/40942815a91a208d19de00473f395bd15f435c23 "") chore(deps): Update Go deps ( [#2744](https://github.com/cerbos/cerbos/pull/2744 "")) • [aa5c201](https://github.com/cerbos/cerbos/commit/aa5c201d3f993c5399f3d83765468316f8adbacd "") chore(deps): Update No… [cerbos/cerbos](https://github.com/cerbos/cerbos "") 🚀 2 a Anna Paykina 10/29/2025, 11:03 AM Hey community 👋 We just published a **[technical guide on how to leverage JWT claims in Cerbos](/content/blog/leveraging-jwt-claims-in-cerbos-access-control ""/index.html).** Feel free to check it out if it’s relevant for you. Main takeaways: • Cerbos verifies JWTs using your JWKS and exposes claims directly to policy conditions. • You can configure multiple keysets, cache verified tokens, and handle rotation without restarts. • Claims like iss, aud, and sub can be enforced centrally in CEL expressions. • Gateways can pass tokens through; one policy set covers edge and service. • Stolen credentials remain a top initial action in breaches at 24 percent in 2024. Strong token verification helps reduce risk. • Disable verification only for controlled testing, not for production. 👍 2 a Anna Paykina 10/30/2025, 6:33 AM Hey everyone 🙂 Coming to you with some great news. **You can now run Cerbos natively inside AWS Lambda. \[ [Guide for reference](/content/blog/run-cerbos-natively-inside-aws-lambda ""/index.html)\]** Depending on your preference, you can deploy Cerbos directly in AWS Lambda-either as a standalone function or as a lightweight extension layer-while using Cerbos Hub for centralized policy management and audit-logging. cerbie 1 🙌 1 a Anna Paykina 11/03/2025, 11:00 AM Hey everyone, we got some requests asking for a possibility to **automate Cerbos policy uploads.** There is now a solution 🙌 The cerbos-store-action GitHub Action can be used for this purpose. **[Check out our guide for details](/content/blog/automate-cerbos-policy-uploads-with-the-cerbos-store-action-git-hub-action ""/index.html).** Have a great week!👋 cerbie 2 💪 2 👍 2 a Anna Paykina 11/20/2025, 9:25 AM Hey ! We have introduced **security controls designed specifically for agentic AI** 🤖🚀 Using Cerbos, you can enforce fine grained authorization at every step of your agent’s workflow: • You can filter RAG retrievals before they ever reach a prompt. • You can control which MCP tools an agent can use based on permissions and context. • You can authorize every downstream API call the agent makes. • And you can capture structured audit logs that explain every allow and deny decision. With Cerbos in place, your AI agents stay within the security and compliance boundaries you set. [Check out the details here](/content/features-benefits-and-use-cases/ai-security ""/index.html) 🎉 5 🙌 1 🚀 2 a Andre Du Plessis 11/20/2025, 11:05 AM Okay l Lisa Dziuba 12/02/2025, 5:32 AM Hello **@channel**! I'd love to invite you all to a practical webinar **on securing agnetic AI**. I guess this is the topic many of you care about 🤖. It will be 45-minute sessions where our team will cover: • Real attack surfaces and abuse cases from agentic workflows • Guardrail patterns for controlling agent-initiated actions • Authorization models that constrain what agents can do • How to map controls to SOC2 / privacy / enterprise audit needs • Practical architecture patterns you can reuse immediately • Zero trust principles for agents • A walkthrough of agentic access control policies + examples Speaker is **@Alex Olivier (Cerbos)**, CPO at Cerbos. Much of his current work is centered around securing agentic workflows and the new controls required to keep AI systems safe. 🛠️ Alex will show agentic demos, access control policy templates, and workflow diagrams. 📆 **Date:** Dec 16, 2025, 05:30 PM (GMT+0)/ 9.30 AM PST cerbie Zoom link to register: [https://zoom.us/webinar/register/3617646715082/WN\_9mtiwDYGRZqw3hr6KsAbMQ](https://zoom.us/webinar/register/3617646715082/WN_9mtiwDYGRZqw3hr6KsAbMQ "") Looking to see you there! cerbie 3 📹 3 🎉 3 cerbos 2 👌 1 GitHub 12/03/2025, 2:53 AM [Release - v0.48.0](https://github.com/cerbos/cerbos/releases/tag/v0.48.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.48.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.48.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.48.0.html "") \## Changelog • [8838f2a](https://github.com/cerbos/cerbos/commit/8838f2ae60afbf4ff0f076b8fb7f537a895ef609 "") Add v0.48.0 release notes ( [#2827](https://github.com/cerbos/cerbos/pull/2827 "")) • [c02028c](https://github.com/cerbos/cerbos/commit/c02028c2f2e993998d3759329b9f31a7c45acafb "") Fix free-disk-space action ( [#2816](https://github.com/cerbos/cerbos/pull/2816 "")) • [1022dba](https://github.com/cerbos/cerbos/commit/1022dbac504f3e57a8d05fb4a7f7536130567724 "") Implement inspect.RuleTables ( [#2818](https://github.com/cerbos/cerbos/pull/2818 "")) • [e050e29](https://github.com/cerbos/cerbos/commit/e050e29f00895e9d76f912bb41db6e630e6bdd95 "") Pin cerbos/buf-breaking-action version ( [#2819](https://github.com/cerbos/cerbos/pull/2819 "")) • [d3133c2](https://github.com/cerbos/cerbos/commit/d3133c29a0428742916cdd23db59059f70d0daeb "") Pin golangci-lint version in CI ( [#2811](https://github.com/cerbos/cerbos/pull/2811 "")) • [9de93b8](https://github.com/cerbos/cerbos/commit/9de93b86c1d201059f2ff1266c3d4d38e37b45d7 "") Remove jlumbroso/free-disk-space action ( [#2815](https://github.com/cerbos/cerbos/pull/2815 "")) • [fe0a0dd](https://github.com/cerbos/cerbos/commit/fe0a0dd23627abca7e9f7d47836dbbb803308da4 "") Update verdaccio to 6.2.2 ( [#2810](https://github.com/cerbos/cerbos/pull/2810 "")) • [dc198e5](https://github.com/cerbos/cerbos/commit/dc198e54a32c5110184689316e1360f42b495743 "") Use ``` extractions/setup-crate ``` directly ( [#2812](https://github.com/cerbos/cerbos/pull/2812 "")) • [6a966b2](https://github.com/cerbos/cerbos/commit/6a966b24853886ea3add32181dbaa3002e7423be "") chore(api): Reimplement AuthZen APIs using direct calls to engine ( [#2798](https://github.com/cerbos/cerbos/pull/2798 "")) • [883e9ec](https://github.com/cerbos/cerbos/commit/883e9ec24591554193e47cf1ffe9d6d3cb05a374 "") chore(ci): Add "v" prefix to cosign version ( [#2763](https://github.com/cerbos/cerbos/pull/2763 "")) • [ed6ac72](https://github.com/cerbos/cerbos/commit/ed6ac72e4661e47052518207aacba0d63b674bfd "") chore(ci): Fix cosign version to 2.6.1 ( [#2760](https://github.com/cerbos/cerbos/pull/2760 "")) • [72ff0e5](https://github.com/cerbos/cerbos/commit/72ff0e59368f91a0cc0563d375bbea45c5612ae9 "") chore(ci): Fix no such host error in e2e tests ( [#2775](https://github.com/cerbos/cerbos/pull/2775 "")) • [c747b01](https://github.com/cerbos/cerbos/commit/c747b01cf7f20ff330cde67315136d819d5b4e40 "") chore(ci): Fix release workflow, rename cerbosfunc, update lambda docs ( [#2748](https://github.com/cerbos/cerbos/pull/2748 "")) • [cc5819f](https://github.com/cerbos/cerbos/commit/cc5819fa670ab7a148474661c1b2e5bb293b6296 "") chore(ci): Pin GitHub Action digests ( [#2807](https://github.com/cerbos/cerbos/pull/2807 "")) • [a8bcd9e](https://github.com/cerbos/cerbos/commit/a8bcd9ef7bad6e188b525a1c1cd07300977ce8cd "") chore(ci): Remove -failfast flag when executing E2E tests ( [#2776](https://github.com/cerbos/cerbos/pull/2776 "")) • [052aec9](https://github.com/cerbos/cerbos/commit/052aec981d467f08dbcbc5c28f18b669fe82cb64 "") chore(ci): Remove conventional commits requirement ( [#2806](https://github.com/cerbos/cerbos/pull/2806 "")) • [6602c25](https://github.com/cerbos/cerbos/commit/6602c2558da343fbd954516bdbf9304eb698cc2c "") chore(deps): Bump [github.com/opencontainers/runc](http://github.com/opencontainers/runc "") from 1.2.3 to 1.2.8 ( [#2767](https://github.com/cerbos/cerbos/pull/2767 "")) • [0a4e029](https://github.com/cerbos/cerbos/commit/0a4e029d83f59e44124efeda449fbb5e09536ecf "") chore(deps): Bump [golang.org/x/crypto](http://golang.org/x/crypto "") from 0.37.0 to 0.45.0 in /hack/tools/changelog ( [#2805](https://github.com/cerbos/cerbos/pull/2805 "")) • [4d99f7c](https://github.com/cerbos/cerbos/commit/4d99f7c77e5b2c9fd195c0ccc29b91e86967a938 "") chore(deps): Bump [golang.org/x/crypto](http://golang.org/x/crypto "") from 0.43.0 to 0.45.0 in /tools ( [#2794](https://github.com/cerbos/cerbos/pull/2794 "")) • [8dd72c7](https://github.com/cerbos/cerbos/commit/8dd72c79d9535fdb538dab73e1aa1ad771a0f465 "") chore(deps): Pin dependencies ( [#2809](https://github.com/cerbos/cerbos/pull/2809 "")) • [cb47613](https://github.com/cerbos/cerbos/commit/cb47613e4a5afc69e1df90e4e0b1d41ad25c739b "") chore(deps): Update GitHub Actions deps ( [#2750](https://github.com/cerbos/cerbos/pull/2750 "")) • [aa7968c](https://github.com/cerbos/cerbos/commit/aa7968c48949a92277aaeb7d1cbd238a24ab789c "") chore(deps): Update GitHub Actions deps ( [#2756](https://github.com/cerbos/cerbos/pull/2756 "")) • [60703b8](https://github.com/cerbos/cerbos/commit/60703b8c2399589ff715caf7b347b02d8dd81f49 "") chore(deps): Update GitHub Actions deps ( [#2821](https://github.com/cerbos/cerbos/pull/2821 "")) • [6136f27](https://github.com/cerbos/cerbos/commit/6136f27ca213b7b8f0d5701fee22b4f84b08e46f "") chore(deps): Update GitHub Actions deps to v6 (major) ( [#2755](https://github.com/cerbos/cerbos/pull/2755 "")) • [3913ce1](https://github.com/cerbos/cerbos/commit/3913ce18389709a80e58dc4a14310efd6b6df51f "") chore(deps): Update Go deps ( [#2751](https://github.com/cerbos/cerbos/pull/2751 "")) • [81d1746](https://github.com/cerbos/cerbos/commit/81d174693326dd431851615ab7199244105ba755 "") chore(deps): Update Go deps ( [#2772](https://github.com/cerbos/cerbos/pull/2772 "")) • [27656c0](https://github.com/cerbos/cerbos/commit/27656c0cb02f21ddbc72f775f4df5d4c375b7736 "") chore(deps): Update Go deps ( [#2788](https://github.com/cerbos/cerbos/pull/2788 "")) • [dbd2f64](https://github.com/cerbos/cerbos/commit/dbd2f640698b0937e1c9cb27516bd97e2f13324d "") chore(deps): Update Go deps ( [#2799](https://github.com/cerbos/cerbos/pull/2799 "")) • [afd20ef](https://github.com/cerbos/cerbos/commit/afd20ef5f264a4b7bbe164a9a2446f6aae0d88f4 "") chore(deps): Update Node.js deps ( [#2753](https://github.com/cerbos/cerbos/pull/2753 "")) • [ebc6907](https://github.com/cerbos/cerbos/commit/ebc6907a291f76ce53ead26fde8d968c569dc0e2 "") chore(deps): Update Node.js deps ( [#2789](https://github.com/cerbos/cerbos/pull/2789 "")) • [f3872e9](https://github.com/cerbos/cerbos/commit/f3872e99dec916a807826785bb895db8416c668a "") chore(deps): Update Node.js deps ( [#2800](https://github.com/cerbos/cerbos/pull/2800 "")) • [9b7fae8](https://github.com/cerbos/cerbos/commit/9b7fae8ec1baf6ce80888f934baf1107e121211e "") chore(deps): Update Node.js deps ( [#2822](https://github.com/cerbos/cerbos/pull/2822 "")) • [e805581](https://github.com/cerbos/cerbos/commit/e80558108b457664bf59e5e26e120255cc065813 "") chore(deps): Update actions/upload-artifact action to v5 ( [#2754](https://github.com/cerbos/cerbos/pull/2754 "")) • [0574697](https://github.com/cerbos/cerbos/commit/0574697b7718e1a8b46a1b24581897fe6fce09a2 "") chore(deps): Update dependency corepack to v0.34.2 ( [#2771](https://github.com/cerbos/cerbos/pull/2771 "")) • [019092f](https://github.com/cerbos/cerbos/commit/019092f46eb1e3667bc2b3648bc91fb9f7b1ef1c "") chore(deps): Update dependency node to v24 ( [#2757](https://github.com/cerbos/cerbos/pull/2757 "")) • [7215630](https://github.com/cerbos/cerbos/commit/72156309b9b782eef77fd8ceccc446e2bcafd7ef "") chore(deps): Update module [golang.org/x/crypto](http://golang.org/x/crypto "") to v0.45.0 \[SECURITY\] ( [#2795](https://github.com/cerbos/cerbos/pull/2795 "")) • [b21e502](https://github.com/cerbos/cerbos/commit/b21e502043e17a5de82e98c9f306adb1451cecb5 "") chore(deps): Update sigstore/cosign-installer action to v4 ( [#2758](https://github.com/cerbos/cerbos/pull/2758 "")) • [98da70f](https://github.com/cerbos/cerbos/commit/98da70fdb8e3a70463ff8d5d0b425971d0ca1521 "") chore(release): Prepare release 0.48.0 • [15bf74d](https://github.com/cerbos/cerbos/commit/15bf74d5126b94469aec6d2d5b0ae45b4ed47540 "") chore(version): Bump version to 0.48.0 • [71107bc](https://github.com/cerbos/cerbos/commit/71107bc3ceaa53681610eec0950dbbe0f8e09260 "") chore: Add ``` just align ``` recipe to sort struct fields ( [#2790](https://github.com/cerbos/cerbos/pull/2790 "")) • [a702850](https://github.com/cerbos/cerbos/commit/a702850f89b1bdcff0af56c8226e1e5a4a6a57a4 "") chore: Add manifest field to rule table ( [#2768](https://github.com/cerbos/cerbos/pull/2768 "")) • , we have some big news: We just released our comprehensive guide to multitenant authorization! 🎉 📚 **[“One size does not fit all: A guide to multitenant authorization”](https://solutions.cerbos.dev/guide-to-multitenant-authorization "")** We keep seeing the same pattern across companies: fixed roles work at small scale, but collapse under enterprise complexity. This ebook captures how we help teams solve that problem. The “Admin, Editor, Viewer” model becomes a cage when an enterprise signs up for a SaaS product. Teams scramble to create thousands of tenant-specific role variants. Role explosion follows. Support tickets pile up. Enterprise deals stall. _**We’ve distilled everything we’ve learned, from real-world implementations, architecture patterns, and painful lessons, into a practical guide that shows teams how to implement dynamic, multitenant authorization that actually scales.**_ In the ebook we dive into: → Why fixed roles break at enterprise scale (and what role explosion really looks like) → How to implement authorization that mirrors each tenant’s organizational reality → Architecture patterns for separating platform-wide rules from tenant-specific policies → How to balance central control with tenant self-service and delegated administration → Real examples from leading SaaS companies scaling authorization across thousands of tenants → The PEP/PDP/PAP pattern and policy-as-code workflows 🔗\* [Download the ebook](https://solutions.cerbos.dev/guide-to-multitenant-authorization "")\\* 🔗 👍 3 💪 4 🎉 2 cerbie 3 🙌 2 🏘️ 1 GitHub 12/10/2025, 4:15 AM [Release - v0.49.0](https://github.com/cerbos/cerbos/releases/tag/v0.49.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.49.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.49.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.49.0.html "") \## Changelog • [a9d48db](https://github.com/cerbos/cerbos/commit/a9d48db18e0d4107ffd99d7580dd92d76fa09384 "") Ability to pipe Hub audit logs to a secondary backend ( [#2832](https://github.com/cerbos/cerbos/pull/2832 "")) • [6b9e9db](https://github.com/cerbos/cerbos/commit/6b9e9db639b227eb4899e6f58f6de4c5eabb2c22 "") Add policy source for EPDP v2 ( [#2840](https://github.com/cerbos/cerbos/pull/2840 "")) • [52c4f78](https://github.com/cerbos/cerbos/commit/52c4f78d9805823793e271b1e452ef6f3b0836b8 "") Add v0.49.0 release notes ( [#2839](https://github.com/cerbos/cerbos/pull/2839 "")) • [61ab8a6](https://github.com/cerbos/cerbos/commit/61ab8a68375125ca0bc1f6a88690b072833065a0 "") Fix error message when upload-git fails ( [#2828](https://github.com/cerbos/cerbos/pull/2828 "")) • [347b733](https://github.com/cerbos/cerbos/commit/347b733f37eacabd538f52301b8c1e71dd99dae7 "") Options to control instrumentation of in-process service ( [#2838](https://github.com/cerbos/cerbos/pull/2838 "")) • [4bdc775](https://github.com/cerbos/cerbos/commit/4bdc775be4807983867a4afccf01c0a3744af966 "") changelog entry for role policy DENY intersect fix ( [#2833](https://github.com/cerbos/cerbos/pull/2833 "")) • [3885f81](https://github.com/cerbos/cerbos/commit/3885f819fb02cbf88051ea5de90c84874f91ad4c "") chore(deps): Bump jws from 3.2.2 to 3.2.3 in /npm/test/registry ( [#2830](https://github.com/cerbos/cerbos/pull/2830 "")) • [fcf3c3b](https://github.com/cerbos/cerbos/commit/fcf3c3b647180853a2302b3f0c20326ae2e27c42 "") chore(deps): Update GitHub Actions deps ( [#2834](https://github.com/cerbos/cerbos/pull/2834 "")) • [e36e898](https://github.com/cerbos/cerbos/commit/e36e898330362f6e72d040f49a6657ed33539e20 "") chore(deps): Update Go deps ( [#2835](https://github.com/cerbos/cerbos/pull/2835 "")) • [0e08f4c](https://github.com/cerbos/cerbos/commit/0e08f4c5335c940253df3002d92a52c0dae841fa "") chore(release): Prepare release 0.49.0 • [82108bf](https://github.com/cerbos/cerbos/commit/82108bf7b915d8c7f9ef421fdbc6a75f4cd95405 "") chore(version): Bump version to 0.49.0 • [c677615](https://github.com/cerbos/cerbos/commit/c677615ca3bd65774e31d9a29ef4ac4e63bd21ce "") fix: Correctly intersect role policy DENYs for multi-role principals ( [#2831](https://github.com/cerbos/cerbos/pull/2831 "")) • [60fac8a](https://github.com/cerbos/cerbos/commit/60fac8aaad9e32871140e06011c4fbcc7a22e330 "") fix: Output serialization in the AuthZen response ( [#2837](https://github.com/cerbos/cerbos/pull/2837 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 12/15/2025, 9:36 AM Hey everyone! Our CPO and co-founder, [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), put together a write-up of the **[key insights from Gartner IAM Summit 2025](/content/blog/gartner-iam-summit-2025-authorization-authzen-identity-security-expanding-to-every-workload ""/index.html)** High level summary: Authorization has evolved from a backend control into strategic identity infrastructure. What’s driving this shift: 1️⃣ Workload IAM is the new frontier. 2️⃣ Authorization modernization is no longer optional. 3️⃣ Standards are accelerating adoption. As identity ecosystems expand beyond humans into autonomous agents and distributed infrastructure, organizations need to rethink how access decisions are designed, enforced, and standardized. Feel free to read the full recapfor deeper insights on policy based authorization, the coexistence of authorization models, and why this matters for security architectures 👇 [https://www.cerbos.dev/blog/gartner-iam-summit-2025-authorization-authzen-identity-security-expanding-to-every-workload](/content/blog/gartner-iam-summit-2025-authorization-authzen-identity-security-expanding-to-every-workload ""/index.html) 👍 2 cerbie 2 👀 2 a Anna Paykina 12/18/2025, 5:59 AM Hey ! 👋 We just published a blog comparing **Cerbos PDP vs. Cerbos Hub** – ultimately, when you can use the open source engine alone vs. when you need the managed solution. It breaks down the operational differences across policy writing, testing, distribution, updates, and audit logging – plus the engineering cost of building it yourself. Worth a read if you’re scaling authorization or hitting operational pain points: [https://www.cerbos.dev/blog/cerbos-pdp-and-cerbos-hub-choosing-the-right-setup-for-your-team](/content/blog/cerbos-pdp-and-cerbos-hub-choosing-the-right-setup-for-your-team ""/index.html) If you have any question - drop them in the thread. Happy to discuss! 💬 🙌 2 cerbos 2 👌 2 👍 2 GitHub 12/22/2025, 6:10 AM [Release - v0.50.0](https://github.com/cerbos/cerbos/releases/tag/v0.50.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") \## Cerbos 0.50.0 View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.50.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.50.0.html "") \## Changelog • [a4b548d](https://github.com/cerbos/cerbos/commit/a4b548d8d3003b2648dfe36909cb851adac6629a "") Add default scope configuration to be used when scope is not specified in the request ( [#2843](https://github.com/cerbos/cerbos/pull/2843 "")) • [76861a6](https://github.com/cerbos/cerbos/commit/76861a668ffc6e4c32d4b4e212fd397f2a96f1f8 "") Add dot as an alias to empty scope in requests ( [#2846](https://github.com/cerbos/cerbos/pull/2846 "")) • [6f76194](https://github.com/cerbos/cerbos/commit/6f76194d17c126f9eaca00b9c3bd7d6407b80447 "") Add v0.50.0 release notes ( [#2863](https://github.com/cerbos/cerbos/pull/2863 "")) • [2422259](https://github.com/cerbos/cerbos/commit/2422259e127095e55dd4b9d72636ec94dccf76ac "") Introduce InspectPolicies API for rule tables ( [#2836](https://github.com/cerbos/cerbos/pull/2836 "")) • [777ad46](https://github.com/cerbos/cerbos/commit/777ad46022e3650f4f3328a75c644764a95c7b8a "") Prevent index lookup of constants, globals, and variables ( [#2858](https://github.com/cerbos/cerbos/pull/2858 "")) • [7db8ae1](https://github.com/cerbos/cerbos/commit/7db8ae1a23b45f959b667fcd6db081abe5889349 "") Revert breaking change to EPDP interface ( [#2853](https://github.com/cerbos/cerbos/pull/2853 "")) • [0ccb88e](https://github.com/cerbos/cerbos/commit/0ccb88e6c50e14b592a69cd37a8bfd4b7d692b7f "") Update GoReleaser config ( [#2855](https://github.com/cerbos/cerbos/pull/2855 "")) • [6929c0b](https://github.com/cerbos/cerbos/commit/6929c0b42754774f8259517843f5298a6815481b "") Use namer.ScopeValue when fitting ( [#2848](https://github.com/cerbos/cerbos/pull/2848 "")) • [4e2292c](https://github.com/cerbos/cerbos/commit/4e2292ca27f23f3f9d5852e7810337cb808d2168 "") chore(deps): Bump [github.com/quic-go/quic-go](http://github.com/quic-go/quic-go "") from 0.56.0 to 0.57.0 in /tools ( [#2841](https://github.com/cerbos/cerbos/pull/2841 "")) • [7d58efd](https://github.com/cerbos/cerbos/commit/7d58efd2ae2419642aa01f0ef14f46a0ce74b8a0 "") chore(deps): Update GitHub Actions deps ( [#2844](https://github.com/cerbos/cerbos/pull/2844 "")) • [1d3758c](https://github.com/cerbos/cerbos/commit/1d3758c8299b59243845897a247d5a76983ec879 "") chore(deps): Update Go deps ( [#2845](https://github.com/cerbos/cerbos/pull/2845 "")) • [60f11a7](https://github.com/cerbos/cerbos/commit/60f11a79a63872b754d89a345fba61b6e7a36cb8 "") chore(deps): Update Go deps ( [#2862](https://github.com/cerbos/cerbos/pull/2862 "")) • [5bffe40](https://github.com/cerbos/cerbos/commit/5bffe40cd3796603fc5dc076c7f4180f8ce33396 "") chore(deps): Update Node.js deps ( [#2851](https://github.com/cerbos/cerbos/pull/2851 "")) • [3afeeb8](https://github.com/cerbos/cerbos/commit/3afeeb86bb6f77a49c725366fc40158172d00711 "") chore(deps): Update actions/checkout action to v6 ( [#2852](https://github.com/cerbos/cerbos/pull/2852 "")) • [3d67f66](https://github.com/cerbos/cerbos/commit/3d67f665bcb354d60a5fd3103bbbcd5045baf749 "") chore(release): Prepare release 0.50.0 • [2ff256b](https://github.com/cerbos/cerbos/commit/2ff256b0cb1fae749ea1d7debc22aae1f9f780cf "") chore(version): Bump version to 0.50.0 • [3eef8f3](https://github.com/cerbos/cerbos/commit/3eef8f385de8fc7f99fa933ba5bd415cf5e44293 "") chore: Ruletable optimization clean-up ( [#2860](https://github.com/cerbos/cerbos/pull/2860 "")) • [c20c6d7](https://github.com/cerbos/cerbos/commit/c20c6d7955bde9519ee0231449b8962830187725 "") enhancement: Ruletable optimizations and refactoring ( [#2857](https://github.com/cerbos/cerbos/pull/2857 "")) • [db9fb5e](https://github.com/cerbos/cerbos/commit/db9fb5ec9bec1a68e052b0c0b2f6eb4608f15c35 "") fix(planner): Union nodes across scope boundaries ( [#2849](https://github.com/cerbos/cerbos/pull/2849 "")) • [1ab8a62](https://github.com/cerbos/cerbos/commit/1ab8a629c088de3b4e7dca61faba36cc5bf09653 "") fix: Isolate role policy restrictions ( [#2842](https://github.com/cerbos/cerbos/pull/2842 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 12/24/2025, 6:26 AM **Hey community! Happy Holidays from all of us at Cerbos!** 🎄✨ **Thank you for your support throughout the year, we’re excited for what’s ahead in 2026!** In the meantime, if you’re looking for a fun challenge over the holidays, check out our Policy Game. See who among your friends and family can get the high score: [https://game.cerbos.dev/?event=happyholidays2025](https://game.cerbos.dev/?event=happyholidays2025 "") 🕹️ It’s a brain-teasing policy puzzle that’ll test everyone’s accuracy and speed. May the best decision-maker win! cerbie 1 🎯 1 ❄️ 1 🧡 1 l Lisa Dziuba 02/13/2026, 6:48 AM Roses are red. Violets are blue. Implicit trust is risky. Least privilege looks better on you. ❤️ Fall for runtime authorization this #ValentinesDay: [https://www.cerbos.dev/](/content/ ""/index.html) P.S.: Have a happy Valentine's Day! s Slackbot 02/15/2026, 12:41 AM **@Nishant Vartak** joined #announcements. They’re also new to Cerbos Community. 👋 2 l Lisa Dziuba 02/17/2026, 9:16 AM Hello everyone 👋 Today we’re announcing our integration with Tailscale to bring fine grained authorization to agentic AI. 🤖 AI agents are now calling internal tools and APIs in production. They often run with broad permissions. That creates real risk. • Aperture by Tailscale sits in the request path and intercepts tool calls. It provides visibility into agent activity and usage across your connected systems. • Cerbos evaluates each tool call against policy and returns an explicit allow or deny decision. • Aperture enforces that decision before the action runs. Cerbos also produces decision-level audit logs tied to identity and policy version. 👉 Learn more: [https://www.cerbos.dev/tailscale-aperture](/content/tailscale-aperture ""/index.html) 👏 2 a Anna Paykina 03/04/2026, 5:48 AM Hey, 👋 We’re excited to give a shoutout to Paulo - one of our community members - and his team at Flash! **Flash is a Brazilian fintech using Cerbos to power real-time expense controls for hundreds of corporate clients.** Since making the switch to Cerbos they’ve seen corporate card usage double, they’re managing 6,000+ policy rules in real-time, and they’ve done it all without adding engineering headcount. 🙌📈 Huge thanks to Paulo and the Flash team - not only for building something impressive with Cerbos, but for being kind enough to share their journey with us. Full story here if you want to explore the details: [https://www.cerbos.dev/customers/flash](/content/customers/flash ""/index.html) cerbos 8 👏🏻 1 💫 6 🚀 7 🏦 4 🎉 10 👏 9 ❤️ 1 a Anna Paykina 03/09/2026, 7:20 AM Hey ! We’re hosting a 💻 📹 **free webinar next week on layered security and Zero Trust.** If one of your Zero Trust layers fails, what actually catches the threat next? Few teams can confidently answer what happens when a layer breaks - or whether the threat sails straight through to a breach. Aviation solved this decades ago with the Swiss Cheese Model, and we’re applying the same framework to runtime security. **You’ll walk away with a practical way to stress-test your security layers, identify where the dangerous gaps are, and build a true Zero Trust Architecture you can stand behind.** We’ll cover the six layers of runtime security (identity, authentication, PAM, entitlement management, coarse-grained and fine-grained authorization), where most orgs still have blind spots, and why end-to-end Zero Trust is finally implementable. 📅 Wednesday, March 18th · 6:30pm CET / 9:30am PST · 45 min + Q&A 🔗 **Register here, if you’d like: [https://zoom.us/webinar/register/9117730533248/WN\_rBAJChIBR52EEd5XeNI9xw](https://zoom.us/webinar/register/9117730533248/WN_rBAJChIBR52EEd5XeNI9xw "")** _PS. No worries if you can’t make it live. Register anyway and we’ll send the recording post-webinar._ 💫 5 👍 7 🙌 6 cerbie 3 👀 4 cerbos 1 l Lisa Dziuba 03/10/2026, 6:25 AM Cerbos turns 5 today. 🎉 For five years, Cerbos has been helping teams run secure, scalable authorization. Cerbos is now used by companies around the world to manage complex permissions, enforce policies consistently, and control what AI agents are allowed to access and do. Grateful to everyone building with Cerbos and helping us grow. cerbie 7 💪🏻 1 🎉 10 👏 2 🎂 11 💪 4 👏🏻 1 💜 2 🥰 1 l Lisa Dziuba 03/12/2026, 6:22 AM Hey everyone 👋 **We have some more cool news to share: we're introducing Cerbos for agentic commerce.** AI agents are starting to place orders, trigger refunds, and modify subscriptions inside e-commerce systems. The question becomes: what are those agents actually allowed to do? Cerbos helps e-commerce platforms evaluate every AI agent purchase, refund, and subscription action against centralized authorization policies before money moves: • Evaluate agent actions against policies at runtime • Enforce authorization at the API boundary where agent transactions execute • Apply consistent policies across storefronts, APIs, and integrations • Maintain a clear decision trail showing which policy allowed or denied each action If you are building agent-driven commerce systems, see how authorization policies can control agent transactions. 👉 [https://www.cerbos.dev/agentic-commerce](/content/agentic-commerce ""/index.html) 🚀 5 cerbie 5 🌟 3 l Lisa Dziuba 03/20/2026, 11:07 AM Happy Friday everyone 🙂 Big one today, **we’re introducing Cerbos Synapse** 🎉 Every authorization decision is only as good as the data behind it. Who is this user? What groups are they in? What resource are they trying to access? Most teams end up building this data plumbing themselves, repeatedly, across apps, services, and increasingly AI agents in their stack. Cerbos Synapse enriches authorization requests with identity, resource, and relationship data from your existing systems before the policy engine evaluates what to allow: ✔️ No custom enrichment middleware ✔️ Native integrations for Envoy, Kafka, Trino, and Kubernetes ✔️ Built for AI agents and non-human identities ✔️ Complete audit trail from data source to decision outcome Extensions can be written in Go or any language that compiles to WebAssembly, so you're not locked into one ecosystem. Happy to answer any questions here, or feel free to explore Cerbos Synapse yourself: [https://www.cerbos.dev/product-synapse](/content/product-synapse ""/index.html) 🚀 6 🌟 4 💪 4 🙌 3 💪🏻 1 🙌🏻 1 l Lisa Dziuba 03/26/2026, 12:08 PM 👋 Hey everyone, We’ve been seeing Claude Code spread well beyond engineering. Marketing teams exploring codebases, product managers reading configs, data analysts grepping logs. But there is a gap. There is no central, enforceable way to control what those agents can actually do. Hooks exist, but they are local config, per developer, opt-in. That means no consistent enforcement across the org and no reliable way to see what agents actually did. 🎉 **Today, we are introducing centralized authorization for Claude Code agents.** Every tool call is intercepted and checked against policy before it runs. That gives you control over what agents are allowed to do, at the moment they act: • Allow or deny decisions on every tool call, not just monitoring • Role-based controls so engineers can use Bash while other teams stay read-only • Full audit log tied to the user behind each agent action • Policies as code, versioned, reviewed, and updated without redeploying anything Policies and audit logs are managed in Cerbos Hub, so you have one place to control access and understand what agents are doing across your org. If you want to see how it works or try it out, we’re around and happy to help: 👉 [https://www.cerbos.dev/ecosystem/claude-code](/content/ecosystem/claude-code ""/index.html) 👉 [https://www.cerbos.dev/workshop](/content/workshop ""/index.html) cerbie 4 💫 1 🚀 5 🎉 4 a Anna Paykina 04/07/2026, 9:06 AM Hey community! Hope your week is going well 😊 We wanted to share our new guide + demo with you. It’s all about using Cerbos Synapse with **Apache Trino.** It covers how to add row-level security, column masking, and table-level access control to Trino through its existing OPA plugin. Synapse handles the protocol translation and enriches each query with user attributes from your IdP, so your Cerbos policies control what each user sees down to the row and column level. The 3-min demo shows three users running the same SELECT query and getting completely different results based on who they are. [Blog](/content/blog/row-level-security-for-apache-trino ""/index.html) \+ Demo video▾ If you’re running Trino and have questions about the setup, drop them here :) 💫 3 👍 3 🙌 3 🙌🏻 1 👍🏻 1 a Anna Paykina 04/10/2026, 1:34 PM Hey everyone, happy Friday ☺️ We just published a new blog on the **5 authorization blind spots auditors find most often in enterprise access control.** It walks through the things that come up again and again in real audits - scattered authorization logic across codebases, policies that exist on paper but no proof of enforcement, quarterly access reviews that check role labels instead of actual permissions, non-human identities running with standing privileges, and AI agents deployed without an authorization model. Each section has a “what to do now” piece with practical steps to close the gap before the next audit cycle. Hoping it’s useful for anyone working through SOC 2, ISO 27001, HIPAA, or similar frameworks, or just generally rethinking how authorization fits into their Zero Trust setup 🙂 Full blog: [https://www.cerbos.dev/blog/5-authorization-blind-spots-auditors-find-and-how-to-fix-them](/content/blog/5-authorization-blind-spots-auditors-find-and-how-to-fix-them ""/index.html) Have a great weekend! 🔒 3 👍 3 cerbie 3 a Anna Paykina 04/14/2026, 9:44 AM Hey everyone! Excited to share a walkthrough on using Cerbos Synapse to **add authorization to legacy applications without any code changes** 🙂 _Envoy sits in front of the app as a reverse proxy, handles authentication against your IdP, and calls Synapse for a policy decision on every request. The legacy app doesn’t need an SDK, doesn’t need modifications, doesn’t even know Cerbos is there._ 📖 [Full guide](/content/blog/modernizing-authorization-for-legacy-applications ""/index.html) with policy examples and a phased rollout path 🎥 Video demo▾ showing it in action with a legacy payroll app If you’re dealing with legacy systems that have been sitting outside your authorization framework, this one’s for you! 💥 5 🎉 5 cerbie 5 a Anna Paykina 04/22/2026, 12:13 PM Hey community 👋 **We just published a new guide on writing Cerbos authorization policies with an agent skill we’ve released.** The hardest part of writing authorization policies isn’t the policy language. It’s the translation from business requirements into a precise spec of who can do what, under which conditions, on which resources. So we built an **agent skill that handles the translation for you**. You describe the access rules in plain English (or any language!), it asks the clarifying questions to tighten up anything vague, then generates the full policy bundle for you, including schemas, derived roles, resource policies, and tests, and validates every output against the real Cerbos compiler. If validation fails, it reads the errors and keeps fixing until the policies compile cleanly. It works in Claude Code, Cursor, Codex, OpenCode, and 10+ other agents. Install is one command: Full write-up here: [https://www.cerbos.dev/blog/agent-skill-for-writing-authorization-policies](/content/blog/agent-skill-for-writing-authorization-policies ""/index.html) cerbie 4 🤖 4 🙏 4 👍 3 🎉 2 GitHub 04/28/2026, 2:16 AM [Release - v0.52.0](https://github.com/cerbos/cerbos/releases/tag/v0.52.0 "") New release published by [github-actions\[bot\]](https://github.com/apps/github-actions "") **Cerbos 0.52.0** View the full release notes at [https://docs.cerbos.dev/cerbos/latest/releases/v0.52.0.html](https://docs.cerbos.dev/cerbos/latest/releases/v0.52.0.html "") **Changelog** • [2812325](https://github.com/cerbos/cerbos/commit/2812325c18db5365932a12f3b480096af8485660 "") Add 0.52.0 release notes ( [#3127](https://github.com/cerbos/cerbos/pull/3127 "")) • [3f8cfc3](https://github.com/cerbos/cerbos/commit/3f8cfc35b17e91d249f5c6671533519d0ed6f478 "") Add TraceBatch format for compact trace representation ( [#2945](https://github.com/cerbos/cerbos/pull/2945 "")) • [9a8ceb5](https://github.com/cerbos/cerbos/commit/9a8ceb5a3055098aa45a948309d13d9c06547429 "") Add ability to save Hub credentials ( [#3067](https://github.com/cerbos/cerbos/pull/3067 "")) • [78fec1d](https://github.com/cerbos/cerbos/commit/78fec1dfdb1e72955dd25468ff1ff1e3f7a18cd5 "") Add build constraints ( [#2979](https://github.com/cerbos/cerbos/pull/2979 "")) • [6e74c62](https://github.com/cerbos/cerbos/commit/6e74c625b86f9e1c7027907a7119931a58156f2f "") Add changelog entry for breaking OpenTelemetry changes ( [#2954](https://github.com/cerbos/cerbos/pull/2954 "")) • [d7eefbe](https://github.com/cerbos/cerbos/commit/d7eefbee8a0e9ee2e8aa30f53242790dd93c80b7 "") Add pages/recipes for common questions ( [#3106](https://github.com/cerbos/cerbos/pull/3106 "")) • [9fb62a2](https://github.com/cerbos/cerbos/commit/9fb62a22a767db533cf84d95a2ccb3200289198d "") Add path functions to Cerbos CEL library ( [#3039](https://github.com/cerbos/cerbos/pull/3039 "")) • [f3f464b](https://github.com/cerbos/cerbos/commit/f3f464b6244f3b53b67043976ea7febd2d1068e5 "") Add permissions advisor workflow ( [#3007](https://github.com/cerbos/cerbos/pull/3007 "")) • [ad8d242](https://github.com/cerbos/cerbos/commit/ad8d242efa3a70e28cd8bd01a236e627cd4cfa5d "") Add siteline to docs ( [#3093](https://github.com/cerbos/cerbos/pull/3093 "")) • [b9dc7e1](https://github.com/cerbos/cerbos/commit/b9dc7e1ba668efbfec148e64d1dedde33cd5fc7a "") Add tracer.TracesToBatch ( [#2958](https://github.com/cerbos/cerbos/pull/2958 "")) • [de243ba](https://github.com/cerbos/cerbos/commit/de243ba883cc2a7d5e380a1c03f5d1052ea8a58a "") Add verify.BundleStream ( [#2944](https://github.com/cerbos/cerbos/pull/2944 "")) • [f8a1020](https://github.com/cerbos/cerbos/commit/f8a102074c9b7780be20214a617d814018890009 "") Additional repository statistics ( [#3025](https://github.com/cerbos/cerbos/pull/3025 "")) • [681bcf8](https://github.com/cerbos/cerbos/commit/681bcf862124b7480ef768768c8d64b99ed11e76 "") Avoid compiling constant expressions at runtime ( [#3005](https://github.com/cerbos/cerbos/pull/3005 "")) • [cbfb1b3](https://github.com/cerbos/cerbos/commit/cbfb1b31ba164a64fc1a977c21af3e4292c45ac5 "") Avoid round-tripping attributes to JSON for schema validation ( [#3000](https://github.com/cerbos/cerbos/pull/3000 "")) • [f0e0df7](https://github.com/cerbos/cerbos/commit/f0e0df785d99142b7aaddd9ef51dfa12f46aa60a "") Bump brace-expansion from 2.0.2 to 2.0.3 in /npm/test/registry ( [#3062](https://github.com/cerbos/cerbos/pull/3062 "")) • [74fa896](https://github.com/cerbos/cerbos/commit/74fa896481b1a48a4b72fff75df817472d610d0d "") Bump [filippo.io/edwards25519](http://filippo.io/edwards25519 "") from 1.1.0 to 1.1.1 ( [#2975](https://github.com/cerbos/cerbos/pull/2975 "")) • [a3f8d30](https://github.com/cerbos/cerbos/commit/a3f8d30fe96ceb1e9eadff49f6fe6c3744c5165b "") Bump [github.com/aws/aws-sdk-go-v2/service/s3](http://github.com/aws/aws-sdk-go-v2/service/s3 "") from 1.96.4 to 1.97.3 in /tools ( [#3083](https://github.com/cerbos/cerbos/pull/3083 "")) • [a02dfd0](https://github.com/cerbos/cerbos/commit/a02dfd0077a985bd9f600f33a565b19f2895f1a7 "") Bump [github.com/aws/aws-sdk-go-v2/service/s3](http://github.com/aws/aws-sdk-go-v2/service/s3 "") from 1.97.1 to 1.97.3 ( [#3082](https://github.com/cerbos/cerbos/pull/3082 "")) • [dce4632](https://github.com/cerbos/cerbos/commit/dce46324d425a3d3976c08995ac505cae05be110 "") Bump [github.com/buger/jsonparser](http://github.com/buger/jsonparser "") from 1.1.1 to 1.1.2 in /tools ( [#3054](https://github.com/cerbos/cerbos/pull/3054 "")) • [489656f](https://github.com/cerbos/cerbos/commit/489656f26f5d782dc60b2736635b9cb11c7e0858 "") Bump [github.com/cloudflare/circl](http://github.com/cloudflare/circl "") from 1.6.1 to 1.6.3 ( [#2980](https://github.com/cerbos/cerbos/pull/2980 "")) • [bf6e74a](https://github.com/cerbos/cerbos/commit/bf6e74a62fd2e6c45e44db679447fddc5896b7f9 "") Bump [github.com/cloudflare/circl](http://github.com/cloudflare/circl "") from 1.6.1 to 1.6.3 in /hack/tools/changelog ( [#2981](https://github.com/cerbos/cerbos/pull/2981 "")) • [96b53c0](https://github.com/cerbos/cerbos/commit/96b53c00b9f7af82bdbb273383f404e38cd773bc "") Bump [github.com/cloudflare/circl](http://github.com/cloudflare/circl "") from 1.6.1 to 1.6.3 in /tools ( [#2987](https://github.com/cerbos/cerbos/pull/2987 "")) • [04960ce](https://github.com/cerbos/cerbos/commit/04960ce3fa2b05e78bd6f622a2fa09d59f6f811f "") Bump [github.com/docker/cli](http://github.com/docker/cli "") from 27.4.1+incompatible to 29.2.0+incompatible ( [#3004](https://github.com/cerbos/cerbos/pull/3004 "")) • [a78b47a](https://github.com/cerbos/cerbos/commit/a78b47a8f9e310155e531f9d2c8b62b6408ae332 "") Bump [github.com/go-git/go-git/v5](http://github.com/go-git/go-git/v5 "") from 5.17.0 to 5.17.1 in /hack/tools/changelog ( [#3070](https://github.com/cerbos/cerbos/pull/3070 "")) • [8d29a2f](https://github.com/cerbos/cerbos/commit/8d29a2fc68be8e19e2e517a658a7cc19191fb21b "") Bump [github.com/go-git/go-git/v5](http://github.com/go-git/go-git/v5 "") from 5.17.1 to 5.18.0 in /tools ( [#3109](https://github.com/cerbos/cerbos/pull/3109 "")) • [10d8886](https://github.com/cerbos/cerbos/commit/10d8886ed2064e582c4547addf584094f763a487 "") Bump [github.com/go-git/go-git/v6](http://github.com/go-git/go-git/v6 "") from 6.0.0-alpha.1 to 6.0.0-alpha.2 in /hack/tools/changelog ( [#3113](https://github.com/cerbos/cerbos/pull/3113 "")) • [f1706dd](https://github.com/cerbos/cerbos/commit/f1706ddf94c89806e0f571716c797c210d6a2ce8 "") Bump [github.com/go-jose/go-jose/v4](http://github.com/go-jose/go-jose/v4 "") from 4.1.3 to 4.1.4 ( [#3072](https://github.com/cerbos/cerbos/pull/3072 "")) • [9d61b19](https://github.com/cerbos/cerbos/commit/9d61b19af03da9c59de561dd41008c73a0108b51 "") Bump [github.com/go-jose/go-jose/v4](http://github.com/go-jose/go-jose/v4 "") from 4.1.3 to 4.1.4 in /hack/loadtest ( [#3073](https://github.com/cerbos/cerbos/pull/3073 "")) • [e9bbc5e](https://github.com/cerbos/cerbos/commit/e9bbc5e19f0b78433934cc7b40e3ef41bac882d9 "") Bump [github.com/go-jose/go-jose/v4](http://github.com/go-jose/go-jose/v4 "") from 4.1.3 to 4.1.4 in /tools ( [#3074](https://github.com/cerbos/cerbos/pull/3074 "")) • [35fd059](https://github.com/cerbos/cerbos/commit/35fd059df1b80f385c6110f1856a81df90bf02d0 "") Bump [github.com/jackc/pgx/v5](http://github.com/jackc/pgx/v5 "") from 5.9.1 to 5.9.2 ( [#3118](https://github.com/cerbos/cerbos/pull/3118 "")) • [d4cd21c](https://github.com/cerbos/cerbos/commit/d4cd21c5e7d88f1338fa4e1fe265bbd39cb5384b "") Bump [github.com/sigstore/timestamp-authority/v2](http://github.com/sigstore/timestamp-authority/v2 "") from 2.0.3 to 2.0.6 in /tools ( [#3104](https://github.com/cerbos/cerbos/pull/3104 "")) • [6febdf3](https://github.com/cerbos/cerbos/commit/6febdf3221f7990ad44a747472c11412c27a605d "") Bump [go.opentelemetry.io/otel](http://go.opentelemetry.io/otel "") from 1.40.0 to 1.41.0 in /api/genpb ( [#3121](https://github.com/cerbos/cerbos/pull/3121 "")) • [ebe00a5](https://github.com/cerbos/cerbos/commit/ebe00a5b24e50c19c99b35e03a51692e8979e825 "") Bump [go.opentelemetry.io/otel](http://go.opentelemetry.io/otel "") from 1.40.0 to 1.41.0 in /hack/loadtest ( [#3126](https://github.com/cerbos/cerbos/pull/3126 "")) • [6071f59](https://github.com/cerbos/cerbos/commit/6071f594e0fee25d5b26cc4618fd329e5f6e09b8 "") Bump [go.opentelemetry.io/otel/sdk](http://go.opentelemetry.io/otel/sdk "") from 1.39.0 to 1.40.0 in /tools ( [#2986](https://github.com/cerbos/cerbos/pull/2986 "")) • [73c754d](https://github.com/cerbos/cerbos/commit/73c754d9aebb733bf0f4d4c79b5bc88a2ba5d721 "") Bump [go.opentelemetry.io/otel/sdk](http://go.opentelemetry.io/otel/sdk "") from 1.42.0 to 1.43.0 in /tools ( [#3097](https://github.com/cerbos/cerbos/pull/3097 "")) • ``` ( [#3136](https://github.com/cerbos/cerbos/pull/3136 "")) • [78d494c](https://github.com/cerbos/cerbos/commit/78d494cab93cf3e3723da18d5390bf9222593560 "") chore(release): Prepare release 0.53.0 • [47b23a4](https://github.com/cerbos/cerbos/commit/47b23a4471c76534183e7104ca08365801a889f2 "") chore(version): Bump version to 0.53.0 • [c1d70c9](https://github.com/cerbos/cerbos/commit/c1d70c946227cf63cd56d605f5f1b1fd6742d42b "") fix planner ignoring OVERRIDE\_PARENT for parent DENYs ( [#3137](https://github.com/cerbos/cerbos/pull/3137 "")) [cerbos/cerbos](https://github.com/cerbos/cerbos "") a Anna Paykina 05/26/2026, 11:13 AM Hey everyone! 👋 hope your week is off to a good start! We just published a page on **[AI gateway authorization](/content/features-benefits-and-use-cases/ai-gateway-authorization ""/index.html)**, walking through how to layer fine-grained access control on top of your AI gateway. Feel free to check it out if it’s relevant for you ☺️ AI gateways are good at telling you who’s calling but not what that caller is actually allowed to do. Once an agent starts using tools, calling an LLM, or delegating to another agent, the human behind the request tends to disappear from the audit trail, sub-agents end up inheriting more privilege than they should, and revoking access usually means rotating credentials or redeploying. The page covers what changes when every model call, tool invocation, and agent-to-agent handoff runs through the same policy layer your apps already use. You end up with one audit trail across humans, services, and agents, sub-agents that stay scoped to what the parent had, and policy changes that take effect at request time rather than at deploy time. Plus evidence trails that line up with SOC 2, ISO 27001, HIPAA, and DORA. 🤖 3 🚀 3 👍 3 cerbie 3 a Anna Paykina 05/27/2026, 7:35 AM Hey community 😊 Update for those working in automotive 🚗 UNECE R155 and R156 are now type approval requirements for new vehicle types in UN 1958 markets. They require auditable evidence of who can push what firmware, to which vehicles, under which conditions. _Most platforms have that logic scattered across services in different languages, which is exactly what an auditor can’t follow._ We just published a guide on the authorization layer that actually produces that evidence. It walks through the ``` YAML ``` for a single OTA deploy action across five principals (vehicle engineer, production manager, owner, OEM partner, telematics agent), plus supplier data scoping and ECU diagnostics. **[Full write-up, with the allow/deny matrix and YAML per principal](/content/blog/mapping-business-requirements-to-authorization-policy-for-automotive ""/index.html)** 🚗 3 👍 2 🔒 2 a Anna Paykina 06/08/2026, 11:05 AM Hey everyone 👋 Hope your week is off to a good start! If you’re running our open-source Cerbos PDP, your authorization decisions are happening thousands / millions of times a day with no easy way to see the shape of that traffic. We just shipped 🚀 **Insights** to change that, a **new page in every Cerbos Hub workspace that aggregates the decisions flowing through your PDPs into charts and rankings, so the patterns are obvious without you going looking for them.** You get allows and denies over time (hourly for the last 7 days, daily for the last 30), a count of active principals, and rankings of your busiest principals, resource kinds, and resource and action pairs. _A spike in denials usually means a policy landed stricter than intended or a client is calling for something that no longer exists, and seeing it on a chart is the difference between catching it in minutes and hearing about it from a user days later._ Every chart links straight back into the audit log, pre-filtered to match what you’re looking at, so you can drop into the underlying decisions without rebuilding the filter by hand. The best part is there’s nothing new to wire up. It’s built entirely on the decision data your PDPs already send to Hub, so once audit log collection is on, the page populates on its own. If your PDPs aren’t connected to Hub yet, this is the kind of thing you get when they are. **[Details can be found here](/content/blog/cerbos-hub-insights-live-view-of-what-your-authorization-layer-is-doing ""/index.html)** cerbie 2 ✨ 1 🔢 1 a Anna Paykina 06/17/2026, 7:19 AM Hey ! We have a 📘 🔐 **new ebook out: [The Authorization Maturity Model, a CISO's Benchmark for 2026](https://solutions.cerbos.dev/authorization-maturity-model-a-cisos-benchmark "")** _If you’ve read our [How to adopt externalized authorization](https://solutions.cerbos.dev/how-to-adopt-externalized-authorization "") ebook, this is the security team equivalent._ It gives CISOs: • A 4-stage model to benchmark where their authorization program actually stands • A regulator-by-regulator exposure rating across NIS2, DORA, SEC, the EU AI Act and more • And a 90-day plan to close the gaps. Written by Alex Olivier, our CPO and co-chair of OpenID AuthZEN. And if you’ve been trying to get security leadership behind a real authorization push, this is a good way in. It puts the work in the terms a CISO answers to, regulatory exposure and board-level risk, which is usually what unblocks the buy-in and budget to get started. 🚀 3 💫 4 🔐 3 👍 2 cerbie 4 👍🏻 1 🙌🏻 1 👏🏻 1 a Anna Paykina 06/18/2026, 6:04 AM Hey community, some more news for you all - **we just shipped an** 🤖🚀\* [agent skill for building Cerbos Synapse extensions](/content/blog/agent-skill-for-building-cerbos-synapse-extensions ""/index.html)\* _Cerbos Synapse lets you shape what flows through your Policy Decision Point. Enrich a principal with attributes from a database before the decision runs, map an incoming HTTP or Envoy request onto a check, or stand up a custom endpoint under /ext/ that does exactly what your app needs._ **The skill builds those extensions for you**. You describe what you want in plain terms, something like “enrich the principal with the user’s department from Postgres before the check runs,” and it picks the extension kind and runtime, scaffolds the files, wires the config, writes a test suite, and runs it against a local PDP. You get a working extension to drop into your own project, not a blank file. [Feel free to check it out here](/content/blog/agent-skill-for-building-cerbos-synapse-extensions ""/index.html). 👍 3 💡 1 a Anna Paykina 06/30/2026, 7:16 AM Hey everyone 👋 hope your week’s off to a good start We just shipped the **[Effect matrix in Cerbos Hub](/content/blog/cerbos-hub-effect-matrix-read-authorization-policy-at-a-glance ""/index.html)**. It takes the same compiled policy you already deploy and lays it out as a grid, roles down one side, actions across the top, every cell showing allowed, denied, or conditional. _If you’ve ever had a product owner, a reviewer, or support ask “can this role actually do that,” you know the answer normally means reading through resource policies, derived roles, and conditions to be sure_ 👀\_. The matrix answers it at a glance, without anyone needing to read raw policy.\_ You’ll find it on the Policies tab of a deployment, as a toggle between Source and Effect matrix. Conditional cells aren’t flattened into a yes or no. They’re marked conditional, and you can click in to see the exact rule and the condition behind it. It also flags the cells a wildcard rule reaches into, so a broad ``` documents:* ``` grant shows up as broad instead of hiding in a pattern. It’s live now for any deployment in Cerbos Hub cerbie🚀 [Full write-up here](/content/blog/cerbos-hub-effect-matrix-read-authorization-policy-at-a-glance ""/index.html) cerbie 2 👍 1 🖥️ 1 👌 1 a Anna Paykina 07/06/2026, 7:31 AM Hey everyone 👋 hope your week is off to a good start We just published a **[guide on running an authorization POC that actually reaches production](/content/blog/authorization-poc-guide ""/index.html)** ⚙️\*.\* Most POCs don’t fail on the technology. They stall when success criteria only get defined at the end, so three weeks in the demo works but it’s hard to say whether that proves anything. The guide covers how to scope the POC to one real service instead of a demo app, the six questions worth answering before day one (can it model your real rules, does latency hold under real load, does the audit output satisfy compliance, and so on), who needs to be in the room while it runs, and why two to four weeks with a hard deadline beats an open-ended pilot. Full write-up here: [cerbos.dev/blog/authorization-poc-guide](/content/blog/authorization-poc-guide ""/index.html) 🖥️ 1 👀 1 👍 1 🙌 1 a Anna Paykina 07/08/2026, 5:50 AM Hey everyone! For anyone at 🌍 **WeAreDevelopers World Congress in Berlin** this week: [Alex Olivier](https://www.linkedin.com/in/alexolivier/ ""), our co-founder and CPO, and co-chair of the OpenID AuthZEN working group, is **speaking tomorrow on securing AI agents** once they stop reading and start acting. Prompt instructions aren’t a security boundary, and the talk covers what to put there instead. “The day the chatbot asked for sudo” Thursday, July 9, 11:30 to 12:00, Stage 6 _If you’re around and want to chat in person, DM Alex on LinkedIn and he’ll make sure you find each other: [linkedin.com/in/alexolivier](https://www.linkedin.com/in/alexolivier/ "")_ 👍 1 🤖 1