Red Hat, Inc.

Zoran Regvart

Ralph Bean

Brandon Caton

Joseph James Stuart

Luiz Renato Ferreira Carvalho

Robert Garland Nester

Cuiping Huo

Simon Cobden Baird

Christophe Giuseppe Augello

A system, method, and computer readable medium receive a container image and an attestation log. The container image is built from a build pipeline and the attestation log includes information corresponding to tasks utilized by the build pipeline to build the container image. The system, method, and computer readable medium compare the information in the attestation log with policies that includes build pipeline requirements. The system, method, and computer readable medium release the container image to a destination based on the comparison indicating that tasks utilized by the build pipeline to build the container image meet the build pipeline requirements.

Lazy evaluation of supply chain policy based on transparency log attestations

Growing community of inventors

Grasbrunn, Germany

Zoran Regvart