Red Hat, Inc.

Robert Garland Nester

Ralph Bean

Brandon Caton

Joseph James Stuart

Cuiping Huo

Luiz Renato Ferreira Carvalho

Christophe Giuseppe Augello

Simon Cobden Baird

Zoran Regvart

A system, method, and computer readable medium receive a container image and an attestation log. The container image is built from a build pipeline and the attestation log includes information corresponding to tasks utilized by the build pipeline to build the container image. The system, method, and computer readable medium compare the information in the attestation log with policies that includes build pipeline requirements. The system, method, and computer readable medium release the container image to a destination based on the comparison indicating that tasks utilized by the build pipeline to build the container image meet the build pipeline requirements.

Lazy evaluation of supply chain policy based on transparency log attestations

Growing community of inventors

Raleigh, NC, United States of America

Robert Garland Nester