Google, IBM launch open API for auditing and governing software pipelines

Grafeas provides an open-source API for enforcing security policies across the software supply chain.