Secure Builds Made Easy

Konflux-ci is an open source, cloud-native software factory focused on software supply chain security.

Build

Build artifacts of all kinds from source. Enable hermetic builds and produce accurate SBOMs.

Securely Sign

Generate secure & detailed provenance, an immutable record of what happened during each and every build step.

Identify Vulnerabilities

Catch critical vulnerabilities quickly with each pull request.

Supply Chain Safeguards

Verify container images against major secure software frameworks or your own custom rules.

Integration Tests

Execute integration tests for complex applications and see results in your SCM.

SCM Integration

Build in response to git events, post results of builds and tests back to your Pull or Merge requests