Chainloop Documentation home pagelight logodark logo
  • Get a demo
  • Get a demo
Documentation
Changelog
Command Line Reference
API Reference
  • Website
  • Blog
  • Get Help
    • Welcome to Chainloop
    • Quickstart
    Getting Started
    • Overview
    • Setup
    • Your First Attestation
    • Set Metadata expectations
    • Set Policies expectations
    • Project Compliance
    • Next Steps
    Concepts
    • Overview
    • Attestations
    • Workflows
    • Contracts
    • Material Types
    • Policies
    • Policy Groups
    • Projects and Versions
    • Products
    • Compliance Frameworks and Requirements
    • Integrations
    • Content Addressable Storage (CAS) backend
    Guides
    • Deployment
    • How to write custom policies
    • Send SBOMs to Dependency-Track
    • Track Compliance
    • Use Dagger With Chainloop
    • How to use the Chainloop MCP server
    • Keyless Attestations in GitLab
    • Use Keyfactor SignServer for attestation signing
    • How to monitor your CI/CD systems with Chainloop and Prometheus
    References
    • Compliance Frameworks
    • Role Based Access Control
    • Signing and Verification
    • Model Context Protocol (MCP) Server
    • Audit Logs
    • Authentication Methods
    • CI/CD Runner Context
    • API
    Misc
    • Frequently Asked Questions
    Misc

    Frequently Asked Questions

    Is Chainloop Open Source?

    Partially; The Chainloop platform is comprised of the following components
    • An Open Source Evidence store and CLI, which code can be found here
    • A proprietary web UI dashboard
    • A proprietary library of policies and compliance capabilities.
    The chainloop platform can be deployed on-premises by our customers, but we also have an instance of it running at https://app.chainloop.dev

    Does Chainloop store my Artifacts and Attestation metadata?

    No. They are stored in your Content-Addressable Storage (CAS).

    Our firewall is flagging a request to crb.chainloop.dev, what's this?

    That is our telemetry endpoint. We collect telemetry data to help us enhance Chainloop by gaining insights into its usage.You can learn more about it and even how to deactivate it here.
    API
    slackgithubxlinkedinyoutube
    Powered by Mintlify
    Assistant
    Responses are generated using AI and may contain mistakes.