The safeguards map / 3.7 Admission and owner settings
AMPEL
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A supply chain policy engine that checks signed attestations about source code, tools and builds against policies, and can block a process when a policy fails.
Where it sits
3.7 Admission and owner settings (primary): Evaluates policies written as code against signed attestations, reports the result, and can block a process when a policy evaluates to FAIL.
Ampel is a lightweight supply chain policy engine designed to be embedded across the software development lifecycle
captured
by verifying unforgeable metadata captured in signed attestations
captured
Ampel can report the status of a policy or block processes when a policy evaluates to `FAIL`.
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- by handin CI
- Policy comes from
- owner-entered settings
Handoffs
consumes Provenance and signatures: in-toto attestations, Sigstore bundles
produces Provenance and signatures: SLSA Verification Summary Attestation, in-toto Simple Verification Result
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.