GOS API & Proxy

The GOS API and the FortKnox Proxy work together to ensure your software is built using only Gold Open Source.

GOS API (The Intelligence)

The API identifies the specific Gold Open Source required for your software. Once your projects are onboarded, the API provides the blueprint for "your Gold"—the verified, secure versions of your dependencies that meet the Gold standard.

Identify: Maps your project dependencies to their Gold equivalents.

Plan: Generates the manifest (Gold Plan) required to reach a 100% Gold build.

The Proxy (The Delivery)

The FortKnox Proxy is the delivery mechanism. Once the API defines your Gold requirements, you configure your build tools (Maven, npm, pip, etc.) to pull through the Proxy.

Load: Securely fetches and loads the Gold packages identified by the API into your build environment.

Enforce: Acts as the gatekeeper, ensuring that only the verified Gold versions enter your pipeline.