Current SBOM is present

This policy checks if a current SBOM is present.

No attestation available

No attestation available for this control. This control expects a
https://cyclonedx.org/bom
predicate type. Use the following command to create such an attestation and upload it to the container-registry as well as to DevGuard
devguard-scanner attest --predicateType "https://cyclonedx.org/bom" <json file>

Status

Evaluation result after comparing the policy with the current state of the asset
Could not evaluate control

Update the attestation using the following command
devguard-scanner attest --predicateType "https://cyclonedx.org/bom" <json file>
Copyright © 2025 L3montree GmbH and the DevGuard Contributors. All rights reserved. Version d51ba4d3f2ef56cdcc49e35bed410d86e1263d7a