Enterprise Contract Policies

The Enterprise Contract is a set of tools for verifing the provenance of container images built in Red Hat Trusted Application Pipeline and validating them against a clearly defined Enterprise Contract policy.

The Enterprise Contract policy is defined using the rego policy language and is described here in Release Policy and Pipeline Policy.