Enterprise Contract Policies

The Enterprise Contract is a tool for verifing the provenance of container images built in Konflux CI, and validating them against a clearly defined Enterprise Contract policy.

The Enterprise Contract policy is defined using the rego policy language and is described here in Release Policy and Pipeline Policy.