The safeguards map / 3.7 Admission and owner settings

Minder

Open Source Security Foundation (foundation). OpenSSF, sandbox. Apache-2.0. Mapped; as of .

Drafted with AI

Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made

A platform that enrolls repositories, evaluates them against security policies and rules, and raises alerts or applies automatic remediation.

Where it sits

3.7 Admission and owner settings (primary): Evaluates enrolled repositories and artifacts against the rules in a profile, in predefined or custom rules, then raises an alert or applies automatic remediation when a rule fails.

Minder allows users to enroll repositories and define policy to ensure repositories and artifacts are configured consistently and securely.

captured

Policies can be set to alert only or autoremediate.

captured

Minder currently supports two rule evaluation engines: `rego` and `jq`.

captured

Facts

Concern
security
Names the law
no
Subject
software
Used by
those who make itthose who run it
Runs
at runtime
Policy comes from
vendor defaultsowner-entered settings

Handoffs

consumes Provenance and signatures: package signatures (Sigstore)

Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.