Struct ContainerProvenanceControl 

pub struct ContainerProvenanceControl;

Verifies that container images have SLSA provenance attestations.

Maps to SOC2 PI1.4: processing integrity through artifact provenance. SLSA provenance attestations bind container images to the source commit and build workflow that produced them, enabling consumers to verify the build origin and integrity of the image.

Evaluation tiers:

• Satisfied: all container images have provenance attestations
• Violated: some container images lack provenance attestations
• NotApplicable: no container images in evidence

Trait Implementations

impl Control for ContainerProvenanceControl

fn id(&self) -> ControlId

Returns the unique identifier for this control.

fn description(&self) -> &'static str

Human-readable description for SARIF rule output.

fn evaluate(&self, evidence: &EvidenceBundle) -> Vec<ControlFinding>

Evaluates the evidence bundle and returns one finding per subject.

fn tsc_criteria(&self) -> &'static [&'static str]

SOC2 Trust Services Criteria this control maps to (e.g., &[“CC6.1”, “CC8.1”]). Returns empty slice for controls not mapped to SOC2.

fn remediation_hint(&self) -> Option<&'static str>

Actionable remediation hint shown when the control fails or needs review.