Application trust framework

A data platform comprising:

• at least one processor;
• and
• at least one memory storing instructions that cause the at least one processor to perform operations comprising:
• detecting a creation of an application package on a data platform by a provider of content to the data platform, the application package comprising a set of files for deployment on the data platform for use by a consumer of data services on the data platform;
• adding metadata to the application package, the metadata comprising a scan property status for each version and patch of the application package;
• performing a review of the set of files based on the scan property status of the metadata, the review to detect malicious content based on a set of analysis rules;
• and
• generating a deployment decision for the application package for deployment on the data platform based on a result of the review.

A computer-storage medium comprising instructions that, when executed by one or more processors of a machine, configure the machine to perform operations comprising:

• detecting a creation of an application package on a data platform by a provider of content to the data platform, the application package comprising a set of files for deployment on the data platform for use by a consumer of data services on the data platform;
• adding metadata to the application package, the metadata comprising a scan property status for each version and patch of the application package;
• performing a review of the set of files based on the scan property status of the metadata, the review to detect malicious content based on a set of analysis rules;
• and
• generating a deployment decision for the application package for deployment on the data platform based on a result of the review.