Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

guacsec / trustify Public

Notifications You must be signed in to change notification settings
Fork 48
Star 59

Code
Issues 53
Pull requests 18
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

ADR - Conforma integration#2227

Open

gildub wants to merge 78 commits into

guacsec:mainguacsec/trustify:mainfrom

gildub:adr-ec-integrationgildub/trustify:adr-ec-integrationCopy head branch name to clipboard

Conversation Commits78 (78)Checks Files changed

Open

ADR - Conforma integration#2227
gildub wants to merge 78 commits into
guacsec:mainfrom
gildub:adr-ec-integration

Commits

Commits on May 15, 2026

[WIP] ADR EC integration
gildub
committed
Fix typos
gildub
committed
Fix broken/missing/redundant links;more details
gildub
committed
User realistic parameters for conforma CLI
gildub
committed
Offset link text
gildub
committed
Consolidate trade-offs
gildub
committed
Consolidate, remove redundancy, more focus on details
gildub
committed
Remove S3 from system Architecture
gildub
committed
Offset link
gildub
committed
Component diagram: standalone policy system
gildub
committed
Component details
gildub
committed
Refine SBOM validation process details and update terminology in enterprise contract integration documentation

arpcv
authored and
gildub
committed
Integrated the EC result status; Fix plural for db table; Remove irrelevant requirement

arpcv
authored and
gildub
committed
External HTTP API/Webhook Wraper

arpcv
authored and
gildub
committed
Adjust styles for components and containers
gildub
committed
Swap titles
gildub
committed
Conforma JSON output with HTTP Wrapper feed back
gildub
committed
Fix inconsitencies
gildub
committed
ec_validation_result is Singular
gildub
committed
Adding more details
gildub
committed
Use of a default Policy; Storage system and report_path
gildub
committed
Explaining the Policy handling and the default one
gildub
committed
Remove conforma_version
gildub
committed
Replace with http wrapper
gildub
committed
HTTP Wrapper API
gildub
committed
Two states
gildub
committed
Remove no used table
gildub
committed
Add ec_policy.configuration model
gildub
committed
Add ec_policy.results model
gildub
committed
Add ec_validation.summary model
gildub
committed
Fix inconsistencies
gildub
committed
Flesh out Consequences of EC Wrapper
gildub
committed
Rephrase
gildub
committed
Create explicit futur work section
gildub
committed
Rename ec_validation table
gildub
committed
ec_policy more generic with policy_type ENUM
gildub
committed
ec_policy.revision replace start/end datetime
gildub
committed
ec_validation: clarify status names
gildub
committed
EC service: is now Policy verifier; Conforma used instead of EC name
gildub
committed
Diagrams: Replaced EC
gildub
committed
Use JSON parameter
gildub
committed
Adr must be approved
gildub
committed
Actionable feedback is future work
gildub
committed
Future work
gildub
committed
Use source_document.id
gildub
committed
Move future section at bottom
gildub
committed
Use Conforma name instead of EC
gildub
committed
Move summary into table
gildub
committed
Policy managemt better phrasing; Wrapper is included in trustd
gildub
committed
Renamed executor.rs to client/conforma.rs
gildub
committed
Fix tree
gildub
committed
File structure
gildub
committed
Expanded API Endpoints
gildub
committed
Detailed data model
gildub
committed
All SBOMs are transferred via file
gildub
committed
Remove obsolete text
gildub
committed
Failed state is terminal
gildub
committed
Clarify conforma_version and policy_version
gildub
committed
Restore policy_validation.summary
gildub
committed
Validation start/end time replaced with duration from conforma
gildub
committed
Validation callback to use OIDC
gildub
committed
Align data model
gildub
committed
Typo
gildub
committed
Move up wrapper consequences
gildub
committed
State machine only for validation process
gildub
committed
Adjust status
gildub
committed
Adjust state diagram
gildub
committed
Validation request via insert on conflict
gildub
committed
Add policy_validation.error field, more ec replacements
gildub
committed
Validation is per policy id
gildub
committed
Conforma CLI: No OIDC yet
gildub
committed
Refactor common summary fields; Adjust data model implementation
gildub
committed
Use Option<ValidationOutcome>
gildub
committed
Severities: Used full fledged enum discrimantor
gildub
committed
Endpoints: Align format; Move module; Details auth and securities
gildub
committed
No default policy
gildub
committed

Commits on May 18, 2026

Merge remote-tracking branch 'upstream/main' into adr-ec-integration
gildub
committed
Use Comforma API instead of CLI
gildub
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.