diff --git a/policy.yaml b/policy.yaml
new file mode 100644
index 0000000..5cc010a
--- /dev/null
+++ b/policy.yaml
@@ -0,0 +1,5 @@
+## list in which conditions our pipeline should fail
+secret:
+  contains:
+  - GITHUB
+  - PRIVATEKEY
\ No newline at end of file