Rego policy library to help secure the integrity of software supply chains - View it on GitHub