valqore promote

Check if manifests are ready to promote between environments. Policy-based gates enforce minimum score thresholds, required rules, and compliance packs per environment.

Usage

# Evaluate against an environment policy
valqore env-evaluate <file> --environment <env> [OPTIONS]
 
# Promotion readiness check
valqore promote <source> <target> --manifests <path> [OPTIONS]

Default Policies

Environment	Min Score	Block Severity	Compliance Packs
dev	40	CRITICAL only	None
staging	70	CRITICAL + BLOCK	Optional
prod	85	CRITICAL + BLOCK + WARN	Required (soc2, pci-dss)

Policy File

Override defaults with .valqore/policy.yaml:

# .valqore/policy.yaml
environments:
  dev:
    min_score: 40
    block_on:
      - CRITICAL
    compliance_packs: []
 
  staging:
    min_score: 70
    block_on:
      - CRITICAL
      - BLOCK
    compliance_packs:
      - soc2
 
  prod:
    min_score: 85
    block_on:
      - CRITICAL
      - BLOCK
      - WARN
    compliance_packs:
      - soc2
      - pci-dss
      - hipaa
    required_rules:
      - sec-no-root
      - sec-read-only-fs
      - sec-no-privileged
      - rel-replicas-min
      - cost-resource-limits

Example: Blocked Promotion

$ valqore promote staging prod --manifests ./k8s
 
  Score:       68/100  (required: 85)        ✗ BLOCKED
  Compliance:  soc2 — 4 violations           ✗ BLOCKED
               pci-dss — 1 violation         ✗ BLOCKED
 
  Result: BLOCKED — fix 5 issues to promote to prod.
  Run: valqore evaluate ./k8s --fix to auto-generate fixes.

Example: Successful Promotion

$ valqore promote staging prod --manifests ./k8s-fixed
 
  Score:       92/100  (required: 85)        ✓ PASS
  Compliance:  soc2 — 0 violations           ✓ PASS
               pci-dss — 0 violations        ✓ PASS
 
  Result: READY — manifests can be promoted to prod.