# The role of attestations in a secure software supply chain

DevFeed: [The role of attestations in a secure software supply chain](<https://devfeed.tech/articles/the-role-of-attestations-in-a-secure-software-supply-chain-13269.md>)

Original publisher: [Read original article](<https://www.chainguard.dev/unchained/the-role-of-attestations-in-a-secure-software-supply-chain>)

Published: 2023-04-04T00:00:00Z

Content type: tutorial

Language: en

Sources: [Chainguard: Unchained](<https://devfeed.tech/sources/chainguard-unchained.md>)

Topics: [supply-chain-security](<https://devfeed.tech/topics/supply-chain-security.md>), [chainguard enforce](<https://devfeed.tech/topics/chainguard-enforce.md>), [Docker Verified Publisher](<https://devfeed.tech/topics/docker-verified-publisher.md>)

Tags: [attestation](<https://devfeed.tech/tags/attestation.md>), [chainguard](<https://devfeed.tech/tags/chainguard.md>), [chainguard-enforce](<https://devfeed.tech/tags/chainguard-enforce.md>), [digital-signatures](<https://devfeed.tech/tags/digital-signatures.md>), [integrity](<https://devfeed.tech/tags/integrity.md>), [policy](<https://devfeed.tech/tags/policy.md>), [secure-software](<https://devfeed.tech/tags/secure-software.md>), [secure-software-supply-chain](<https://devfeed.tech/tags/secure-software-supply-chain.md>), [security-policies](<https://devfeed.tech/tags/security-policies.md>), [slsa](<https://devfeed.tech/tags/slsa.md>), [software-attestations](<https://devfeed.tech/tags/software-attestations.md>), [supply-chain](<https://devfeed.tech/tags/supply-chain.md>)

## AI overview

This article explains how attestations support software supply-chain policy enforcement. It describes attestations as signed claims from identified speakers about code or build results, allowing deployment systems to verify policy requirements without repeating expensive or impractical checks.

## Source excerpt

Chainguard Enforce enables policy enforcement using attestations. Learn how to use these principles to create and enforce secure supply chain policies.