Overview of Supply Chain Security Tools for Tanzu – Store

This topic gives you an overview of Supply Chain Security Tools (SCST) – Store.

SCST - Store stores the metadata generated by supplies chains in Tanzu Application Platform. It is made up of two services: Artifact Metadata Repository (AMR) and the Metadata Store.

Artifact Metadata Repository

AMR includes both AMR Observer and AMR CloudEvent Handler.

AMR Observer

AMR Observer is a set of managed controllers that watches for relevant updates on resources of interest. When relevant events are observed, a CloudEvent is generated and sent to AMR CloudEvent Handler. By design, you can deploy this component on Full, Build, and Run profile clusters.

AMR CloudEvent Handler

AMR CloudEvent Handler receives CloudEvents and stores relevant information in Artifact Metadata Repository or the Metadata Store. By design, you can deploy this component on Full and View profile clusters.

Additional resources

• Artifact Metadata Repository architecture
• Configure Artifact Metadata Repository
• AMR GraphQL Query

The Metadata Store

For more information about the Metadata Store, see Overview of the Metadata Store.