SSCS Full Pipeline Traceability Evidence Pipeline Execution Policy CI/CD Catalog

Project information

Data, Code and Build Evidence Collected

Forces SLSA Attestation Manifests on for the entire pipeline (RUNNER_GENERATE_ARTIFACTS_METADATA=true) Captures ALL CI Code through capturing the expanded CI that you see in the pipeline editor Captures Components & Includes with their versions and source locations through the non-expanded .gitlab-ci.yml Captures container source registries and tags through the non-expanded .gitlab-ci.yml Captures Container hashes through the Job Logs capture Captures all SLSA manifests through all Job Artifacts capture All Job Logs All Job Artifacts

Part of DarwinJS Component Builders Library