Enforce admission policies with artifact attestations in Kubernetes using OPA Gatekeeper

We’ve released support for enforcing GitHub Artifact Attestations in OPA Gatekeeper, an open source admission controller for Kubernetes, in public preview.

With this release, you can write and enforce policies that require deployed workloads to include specific attestations, such as build provenance, an SBOM, or any custom attestation. This integration helps you automate and enforce security and compliance requirements in Kubernetes by blocking untrusted or non-compliant images before deployment.

Learn more about using artifact attestations and try out the provider plugin in the GitHub Artifact Attestations OPA Provider repository.