Expose github teams to Policies

Workaround

Creating a plugin to pull from at run time with Creds to github or manual sync in policy

Problem

To require specific approval based on specific changes ie deleting a database, provisioning a public IP or to exempt from block policies if a specific team is added to the PR Require Specific Team Combination Require approval from both SRE and Security teams: package spacelift deny["Changes require approval from both SRE and Security teams"] { approvers := input.third_party_metadata.custom.github_approvers.approvers # Collect teams that have approved approver_teams := {team | approvers[_].teams[_] = team } required_teams := {"sre-team", "security-team"} missing_teams := required_teams - approver_teams count(missing_teams) > 0 }