Red Hat, Inc.

Joseph James Stuart

Ralph Bean

Brandon Caton

Zoran Regvart

Luiz Renato Ferreira Carvalho

Robert Garland Nester

Cuiping Huo

Simon Cobden Baird

Christophe Giuseppe Augello

A system, method, and computer readable medium receive a container image and an attestation log. The container image is built from a build pipeline and the attestation log includes information corresponding to tasks utilized by the build pipeline to build the container image. The system, method, and computer readable medium compare the information in the attestation log with policies that includes build pipeline requirements. The system, method, and computer readable medium release the container image to a destination based on the comparison indicating that tasks utilized by the build pipeline to build the container image meet the build pipeline requirements.

Lazy evaluation of supply chain policy based on transparency log attestations

Growing community of inventors

Saint Paul, MN, United States of America

Joseph James Stuart