---
id: 6592
title: "Automate NIST SSDF Compliance: A Technical Guide to Policy as Code in JFrog AppTrust"
source_domain: jfrog.com
source_url: "https://jfrog.com/blog/automate-nist-ssdf-compliance-with-jfrog-apptrust/"
published_at: "2026-04-16T13:15:07Z"
tags: ["devsecops", "compliance", "jfrog", "nist-ssdf", "sbom", "policy-as-code", "rego"]
phying_url: "https://phying.com/item/6592"
lang: en
---

# Automate NIST SSDF Compliance: A Technical Guide to Policy as Code in JFrog AppTrust

## Summary

JFrog maps NIST SSDF to AppTrust: Rego policies in Open Policy Agent automate SBOM attestation, secure-coding and provenance checks, enforced natively in the pipeline rather than in spreadsheets.

## Intelligence Metadata

- **Sources:** jfrog.com
- **Published:** 2026-04-16T13:15:07Z
- **Original:** https://jfrog.com/blog/automate-nist-ssdf-compliance-with-jfrog-apptrust/
- **Phying News:** https://phying.com/item/6592