View Application Version Evidence

Use the Evidence tab to view all the evidence associated with an application version in tabular form. Evidence is a central component of AppTrust as it provides an immutable audit trail of the actions and operations performed on the application version throughout its lifecycle.

✅

Tip

To view application version evidence and the relationships between that evidence and its subjects in graphical form, see View the Application Version Evidence Graph.

To view application version evidence:

1. In the Platform module, select AppTrust > Applications.

2. In the Applications table, click the name of the relevant application.

3. In the sidebar, click Lifecycle. The Stages Board tab is displayed by default.

   

4. Click the card of the relevant application version to drill down into the version. The Version Timeline tab is displayed by default.

   

5. Click the Evidence tab.

   

The Evidence tab contains the following information about each piece of evidence:

• Verified: Whether the evidence signature has been verified using the public key uploaded to Artifactory.
• Evidence type: The evidence type, for example, evidence about a promotion to a lifecycle stage or an SBOM with the contents of the evidence subject.
• Time: The timestamp of when the evidence was created.
• Created By: The user who created the evidence.

Click a table row to view evidence details. For more information, see View the Evidence Predicate.

Download Evidence

To download evidence to your local system, go to the action menu at the end of the table row and select Download Evidence.