Skip to content
@enterprise-contract

Conforma (formerly Enterprise Contract)

verify artifacts, enforce policies

Engage with the Conforma team by filing an issue in one of the repositories in this GitHub organization.

Our documentation may already have the answer you are looking for.

Note

Conforma was previously known as "Enterprise Contract". Please bear with us as we transition from the old name to the new name, and move our code to its new home in the Conforma GitHub organization.

Pinned Loading

  1. user-guide Public

    Docs on using Enterprise Contract with Red Hat Trusted Application Pipeline

    Shell 2 13

  2. ec-cli Public

    Supply chain artifact verifier and policy checker

    Go 30 37

  3. ec-policies Public

    Rego policies for use with Enterprise Contract

    Open Policy Agent 13 33

  4. enterprise-contract-controller Public

    Defines the Enterprise Contract Policy Kubernetes CRD

    Go 2 17

Repositories

Showing 10 of 18 repositories
  • ec-cli Public

    Supply chain artifact verifier and policy checker

    Go 30 Apache-2.0 37 38 19 Updated Mar 29, 2025
  • golden-container Public

    Trivial definition of an image build in compliance with HACBS policy

    Dockerfile 1 Apache-2.0 12 1 0 Updated Mar 28, 2025
  • ec-policies Public

    Rego policies for use with Enterprise Contract

    Open Policy Agent 13 Apache-2.0 33 16 6 Updated Mar 28, 2025
  • tekton-catalog Public

    All the Tekton tasks provided by the Enterprise Contract team

    Shell 0 Apache-2.0 5 0 2 Updated Mar 28, 2025
  • infra-deployments Public Forked from redhat-appstudio/infra-deployments

    Used solely to create automated pull requests against upstream

    Shell 0 265 0 0 Updated Mar 25, 2025
  • action-validate-image Public

    "Validate" is a robust GitHub Action developed by Enterprise Contract, designed to assess container images for security and compliance. It is made to seamlessly integrate into your CI/CD workflow.

    1 Apache-2.0 4 1 0 Updated Mar 25, 2025
  • .github Public

    Introduce Enterprise Contract

    0 Apache-2.0 4 0 2 Updated Mar 24, 2025
  • enterprise-contract-controller Public

    Defines the Enterprise Contract Policy Kubernetes CRD

    Go 2 Apache-2.0 17 1 10 Updated Mar 24, 2025
  • config Public

    Preset policy configuration files for Enterprise Contract

    Shell 0 9 1 2 Updated Mar 24, 2025
  • infra-deployments-ci Public

    Keep infra-deployments updated with the latest Enterprise Contract components

    Shell 0 Apache-2.0 6 0 2 Updated Mar 24, 2025