Red Hat, Inc.

Cuiping Huo

Ralph Bean

Brandon Caton

Joseph James Stuart

Luiz Renato Ferreira Carvalho

Robert Garland Nester

Christophe Giuseppe Augello

Simon Cobden Baird

Zoran Regvart

A system, method, and computer readable medium receive a container image and an attestation log. The container image is built from a build pipeline and the attestation log includes information corresponding to tasks utilized by the build pipeline to build the container image. The system, method, and computer readable medium compare the information in the attestation log with policies that includes build pipeline requirements. The system, method, and computer readable medium release the container image to a destination based on the comparison indicating that tasks utilized by the build pipeline to build the container image meet the build pipeline requirements.

Lazy evaluation of supply chain policy based on transparency log attestations

Growing community of inventors

Westford, MA, United States of America

Cuiping Huo