When viewing the evidence graph for a Release Bundle v2 version, click the card for an evidence file to view its predicate, which contains the actual contents of the evidence.
All evidence is available in JSON format. Internal evidence generated by Artifactory (such as Release Bundle v2 promotion reports) and Xray (such as SBOMs and vulnerability reports) is also available in Markdown for easy readability. When both formats are available, the Markdown version (including the evidence provider logo) is shown in the Content tab and the JSON version is shown in the Spec tab.
Tip
The predicate can also be viewed from the Evidence tab in the Artifact tree. For more information, see View the Artifact Evidence Table.
Sample predicates of different types are shown below.
Release Bundle v2 Promotion Predicate
Promoting a Release Bundle v2 version creates internal evidence about the event.
Release Bundle v2 Distribution Predicate
Distributing a Release Bundle v2 version to a target (such as an Edge node) creates internal evidence about the event.
Xray Scan Results
The following is an example of vulnerability report evidence generated by Xray in Markdown format.
Test Results
Using the Create Evidence CLI, you can attach external evidence, such as test results performed outside of Artifactory.
Tip
Click the down arrow icon to download the evidence file to your local computer.
Evidence from an External Provider
Evidence uploaded from external providers are displayed with the provider logo, as shown in the example below.