Skip to content
@enterprise-contract

Conforma (formerly Enterprise Contract)

verify artifacts, enforce policies

Engage with the Conforma team by filing an issue in one of the repositories in this GitHub organization.

Our documentation may already have the answer you are looking for.

Note

Conforma was previously known as "Enterprise Contract". Please bear with us as we transition from the old name to the new name, and move our code to its new home in the Conforma GitHub organization.

Pinned Loading

  1. ec-cli Public

    Supply chain artifact verifier and policy checker

    Go 32 40

  2. ec-policies Public

    Rego policies for use with Enterprise Contract

    Open Policy Agent 13 38

  3. enterprise-contract-controller Public

    Defines the Enterprise Contract Policy Kubernetes CRD

    Go 2 18

Repositories

Showing 10 of 15 repositories
  • ec-cli Public

    Supply chain artifact verifier and policy checker

    Go 32 Apache-2.0 40 28 7 Updated May 6, 2025
  • ec-policies Public

    Rego policies for use with Enterprise Contract

    Open Policy Agent 13 Apache-2.0 38 11 6 Updated May 6, 2025
  • golden-container Public

    Trivial definition of an image build in compliance with HACBS policy

    Dockerfile 1 Apache-2.0 12 1 1 Updated May 6, 2025
  • infra-deployments Public Forked from redhat-appstudio/infra-deployments

    Used solely to create automated pull requests against upstream

    Shell 0 272 0 0 Updated May 6, 2025
  • infra-deployments-ci Public

    Keep infra-deployments updated with the latest Enterprise Contract components

    Shell 0 Apache-2.0 6 0 1 Updated May 5, 2025
  • config Public

    Preset policy configuration files for Conforma

    Shell 0 9 1 2 Updated May 5, 2025
  • enterprise-contract-controller Public

    Defines the Enterprise Contract Policy Kubernetes CRD

    Go 2 Apache-2.0 18 1 1 Updated May 2, 2025
  • .github Public

    Introduce Enterprise Contract

    0 Apache-2.0 4 0 1 Updated May 2, 2025
  • Shell 0 174 0 0 Updated Apr 24, 2025
  • go-gather Public

    Placeholder repository for relocated go-gather project

    0 Apache-2.0 0 0 0 Updated Feb 12, 2025