Chapter 1. What is RHTAP?

Who Should Use RHTAP?

RHTAP is tailored for platform engineers, application developers, and security teams seeking a robust, secure solution for managing software supply chains. Whether setting up a new internal developer portal or enhancing existing CI/CD processes, RHTAP offers the tools and flexibility your organization needs to thrive.

How Does RHTAP Work?

RHTAP empowers organizations to secure and streamline their DevSecOps CI/CD workflows with a comprehensive suite of tools:

Once RHTAP is deployed, developers can access pre-built, secure templates within Red Hat Developer Hub, simplifying the creation of new applications. These templates provide a fully equipped environment, including a code repository, technical documentation, and a CI/CD pipeline.

Every time source code is modified, RHTAP triggers a pipeline run that signs and attests each build artifact. The pipeline also performs rigorous vulnerability scans and automatically generates SBOMs, offering full transparency into your application’s components.

As your application advances through various stages—development, staging, and production—RHTAP continuously enforces security standards through your Enterprise Contract (EC). This ensures that only container images meeting predefined quality and security criteria are released, with detailed reports guiding any necessary corrections.