The safeguards map / 3.7 Admission and owner settings
Witness
Drafted with AI
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page. How this site is made
A command-line tool that creates in-toto attestations for steps of a software supply chain and checks them against an owner-written policy with an embedded OPA Rego engine.
Where it sits
3.7 Admission and owner settings (primary): Checks, before use, that software artifacts carry in-toto attestations that satisfy an owner-written policy, evaluated by an embedded Rego policy engine.
Verify how your software was produced and what tools were used
captured
Implements the in-toto specification (including ITE-5, ITE-6 and ITE-7)
captured
An embedded OPA Rego policy engine for policy enforcement
captured
Facts
- Concern
- security
- Names the law
- no
- Subject
- software
- Used by
- those who make itthose who run it
- Runs
- in CI
- Policy comes from
- owner-entered settings
Handoffs
produces Provenance and signatures: in-toto attestations
consumes Provenance and signatures: in-toto attestations
Every quote is verbatim from a stored capture of the page linked under it. Placement is our reading of the product's own documentation; no publisher has reviewed or endorsed it. Rows CC BY 4.0. Names, marks and logos belong to their owners; logos identify each product and are not part of the dataset.