File tree Expand file tree Collapse file tree 2 files changed +42
-2
lines changed
Expand file tree Collapse file tree 2 files changed +42
-2
lines changed Original file line number Diff line number Diff line change @@ -63,7 +63,27 @@ func NewRootCmd() *cobra.Command {
6363 Long : hd .Doc (`
6464 ` + version .CliName () + ` CLI
6565
66- Set of commands to help validate resources with the provided policies.
66+ Secure your software supply chain by validating that your artifacts meet security and
67+ compliance requirements. Conforma helps you verify the authenticity and integrity of
68+ container images, build processes, and deployment pipelines.
69+
70+ Whether you're ensuring images are properly signed, validating build attestations comply
71+ with your organization's policies, or checking that Tekton tasks follow security best
72+ practices, Conforma provides the tools you need to establish trust in your software
73+ delivery process.
74+
75+ Key capabilities:
76+ • Verify signatures and attestations on container images
77+ • Validate SLSA provenance to ensure secure build processes
78+ • Enforce compliance policies across your development workflow
79+ • Generate detailed reports for audit and compliance purposes
80+ • Support for custom validation rules to meet your specific requirements
81+
82+ Use Conforma to implement "trust but verify" practices in your CI/CD pipeline,
83+ ensuring that only secure, compliant artifacts make it to production.
84+
85+ Have feedback or want to contribute? Visit https://conforma.dev/contribute/ to join our
86+ community, report issues, or help improve Conforma.
6787 ` ),
6888
6989 SilenceUsage : true ,
Original file line number Diff line number Diff line change @@ -6,7 +6,27 @@ Conforma CLI
66
77Conforma CLI
88
9- Set of commands to help validate resources with the provided policies.
9+ Secure your software supply chain by validating that your artifacts meet security and
10+ compliance requirements. Conforma helps you verify the authenticity and integrity of
11+ container images, build processes, and deployment pipelines.
12+
13+ Whether you're ensuring images are properly signed, validating build attestations comply
14+ with your organization's policies, or checking that Tekton tasks follow security best
15+ practices, Conforma provides the tools you need to establish trust in your software
16+ delivery process.
17+
18+ Key capabilities:
19+ • Verify signatures and attestations on container images
20+ • Validate SLSA provenance to ensure secure build processes
21+ • Enforce compliance policies across your development workflow
22+ • Generate detailed reports for audit and compliance purposes
23+ • Support for custom validation rules to meet your specific requirements
24+
25+ Use Conforma to implement "trust but verify" practices in your CI/CD pipeline,
26+ ensuring that only secure, compliant artifacts make it to production.
27+
28+ Have feedback or want to contribute? Visit https://conforma.dev/contribute/ to join our
29+ community, report issues, or help improve Conforma.
1030
1131[source,shell]
1232----
You can’t perform that action at this time.
0 commit comments