diff --git a/policy/security/provenance.rego b/policy/security/provenance.rego index e653520..7066b8b 100644 --- a/policy/security/provenance.rego +++ b/policy/security/provenance.rego @@ -1,3 +1,7 @@ +# Software provenance Rego policy verifying that +# (1) the software artifact has an associated SLSA provenance attestation and +# (2) the software artifact was published by Liatrio. + package security.provenance default allow = false