View the Release Bundle Version Evidence Table

When you select a Release Bundle v2 version from the Release Lifecycle page, use the Evidence tab to view a list of evidence files associated with the version.

To view the Release Bundle v2 version evidence table:

1. In the Platform module, select Artifactory > Release Lifecycle.

2. Click the name of the relevant Release Bundle. The Versions tab is displayed by default.

3. Click the name of the relevant Release Bundle version. The Version Timeline tab is displayed by default.

4. Click the Evidence tab.

   

The table includes the following information about each piece of evidence:

• Whether the evidence has been verified using the public key saved in Artifactory
• The type of evidence (for example, an SBOM)
• The timestamp of the evidence
• The creator of the evidence

You can perform the following actions from the actions menu at the end of each table row:

• Download the evidence to your local system
• View the evidence details

Download All Evidence for a Release Bundle Version

You can download a JSON file that contains all the evidence attached to a selected Release Bundle version. The JSON file contains both internal evidence created by Artifactory (for example, during Release Bundle promotion) as well as external evidence added using the JFrog CLI. This feature enables you to save a copy of the evidence locally in a single file.

To download all evidence attached to a Release Bundle version:

1. In the Platform module, select Artifactory > Release Lifecycle.
2. Click the name of the relevant Release Bundle. The Versions tab is displayed by default.
3. Click the name of the relevant Release Bundle version. The Version Timeline tab is displayed by default.
4. From the Actions menu, select Download All Evidence. A single JSON file containing all internal and external evidence related to the Release Bundle version is downloaded to your local system. The name of the file is [Release_Bundle_name]-[version]-Evidence.json.