When viewing the evidence graph for a Release Bundle v2 version, click the card for an evidence file to view its predicate, which contains the actual contents of the evidence.
All evidence is available in JSON format. Internal evidence generated by Artifactory (such as Release Bundle v2 promotion reports) and Xray (such as SBOMs and vulnerability reports) is also available in Markdown for easy readability. When both formats are available, the Markdown version is shown in the Content tab and the JSON version is shown in the Spec tab.
Tip
The predicate can also be viewed from the Evidence tab in the Artifact tree. For more information, see View the Artifact Evidence Table.
Sample predicates of different types are shown below.
Release Bundle v2 Promotion Predicate
Promoting a Release Bundle v2 version creates internal evidence about the event.
Release Bundle v2 Distribution Predicate
Distributing a Release Bundle v2 version to a target (such as an Edge node) creates internal evidence about the event.
Xray Scan Results
The following are examples of SBOM and vulnerability report evidence generated by Xray in Markdown format.
Artifact Test Results
Using the Create Evidence CLI, you can attach external evidence to an artifact, such as test results performed outside of Artifactory.
Tip
Click the down arrow icon to download the evidence file to your local computer.
Note
For more information about attaching external evidence without using the CLI, see Create Your Own DSSE.