---
updatedAt: 2026-05-17T10:49:23.000Z
agentTools:
  siteIndex: https://docs.jfrog.com/llms.txt
  projectIndex: https://docs.jfrog.com/governance/llms.txt
---

# Get Evidence by Subject

Retrieves all evidence records associated with the specified subject. The subject is identified by its repository path.

# OpenAPI definition

```json
{
  "openapi": "3.1.0",
  "info": {
    "title": "JFrog Artifactory Evidence API",
    "description": "REST API for managing evidence records in JFrog Artifactory. Evidence records are secure, verifiable attestations about your software artifacts. They are crucial for establishing a chain of custody and ensuring compliance throughout your software supply chain.",
    "version": "1.0.0",
    "contact": {
      "name": "JFrog Support"
    }
  },
  "servers": [
    {
      "url": "https://{jfrog_url}/evidence/api/v1",
      "description": "Evidence API base path"
    }
  ],
  "tags": [
    {
      "name": "Evidence",
      "description": "Evidence management operations"
    }
  ],
  "paths": {
    "/subject/{subjectRepoPath}": {
      "get": {
        "tags": [
          "Evidence"
        ],
        "summary": "Get Evidence by Subject",
        "description": "Retrieves all evidence records associated with the specified subject. The subject is identified by its repository path.",
        "operationId": "getEvidenceBySubject",
        "parameters": [
          {
            "name": "subjectRepoPath",
            "in": "path",
            "description": "Subject repository path (e.g., commons-dev-generic-local/commons/1.0.0/file.txt)",
            "required": true,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "predicate_categories",
            "in": "query",
            "description": "Comma-separated list of predicate categories to filter by (e.g., security,quality)",
            "required": false,
            "schema": {
              "type": "string"
            }
          },
          {
            "name": "include",
            "in": "query",
            "description": "Comma-separated list of additional fields to include in the response: predicates, signatures",
            "required": false,
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "OK - Evidence records retrieved successfully",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/EvidenceListResponse"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request - Invalid selector or query parameters.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          },
          "401": {
            "description": "Bad Credentials - The request failed because the authentication token is invalid or expired.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          },
          "403": {
            "description": "Permission Denied - The request failed because the authenticated user does not have the required Read permissions for the subject repository path.",
            "content": {
              "application/json": {
                "schema": {
                  "$ref": "#/components/schemas/ErrorResponse"
                }
              }
            }
          }
        }
      }
    }
  },
  "components": {
    "schemas": {
      "ErrorResponse": {
        "type": "object",
        "required": [
          "errors"
        ],
        "properties": {
          "errors": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Error"
            }
          }
        }
      },
      "Error": {
        "type": "object",
        "required": [
          "message"
        ],
        "properties": {
          "message": {
            "type": "string",
            "description": "Human-readable error message"
          },
          "details": {
            "type": "array",
            "items": {
              "type": "string"
            },
            "description": "Optional additional error details"
          }
        }
      },
      "EvidenceView": {
        "type": "object",
        "description": "Evidence record with full details",
        "properties": {
          "id": {
            "type": "string",
            "description": "Unique evidence identifier (SHA-256 based)"
          },
          "repository": {
            "type": "string",
            "description": "Subject repository key"
          },
          "path": {
            "type": "string",
            "description": "Subject path within the repository"
          },
          "subject": {
            "$ref": "#/components/schemas/SubjectView"
          },
          "name": {
            "type": "string",
            "description": "Evidence file name. For multi-segment entity ids the request path is\n`/entity/{type}/{…id segments…}/{evidenceName}` — `evidenceName` is always\nthe final path segment; all preceding segments after `{type}` form `id`.\n"
          },
          "uri": {
            "type": "string",
            "description": "Full URI to the evidence file"
          },
          "sha256": {
            "type": "string",
            "description": "SHA-256 checksum of the evidence file"
          },
          "predicate_category": {
            "type": "string",
            "description": "Category of the predicate (e.g., security, quality)"
          },
          "predicate_type": {
            "type": "string",
            "description": "URI type associated with the predicate"
          },
          "predicate_slug": {
            "type": "string",
            "description": "Simplified version of the predicate type for readability"
          },
          "created_at": {
            "type": "string",
            "format": "date-time",
            "description": "Timestamp when the evidence was created (ISO-8601)"
          },
          "created_by": {
            "type": "string",
            "description": "User or server who created the evidence"
          },
          "verified": {
            "type": "boolean",
            "description": "Indicates whether the evidence signature has been verified using the public key"
          },
          "signing_key": {
            "$ref": "#/components/schemas/SigningKeyView"
          },
          "signatures": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/Signature"
            },
            "description": "DSSE signatures (returned when include=signatures)"
          },
          "predicate": {
            "type": "object",
            "additionalProperties": true,
            "description": "Predicate JSON payload (returned when include=predicates)"
          },
          "provider_id": {
            "type": "string",
            "description": "The ID of the system that provided the evidence"
          },
          "stage": {
            "type": "string",
            "description": "Evidence stage"
          },
          "attachments": {
            "type": "array",
            "maxItems": 1,
            "items": {
              "$ref": "#/components/schemas/AttachmentView"
            },
            "description": "Attachments linked to this evidence (empty if none, max 1). Requires Artifactory >= 7.142.0.\n"
          }
        }
      },
      "AttachmentView": {
        "type": "object",
        "description": "Metadata for an attachment file linked to an evidence record",
        "properties": {
          "name": {
            "type": "string",
            "description": "Original filename of the attachment"
          },
          "sha256": {
            "type": "string",
            "description": "SHA-256 checksum of the attachment file"
          },
          "type": {
            "type": "string",
            "description": "MIME type of the attachment (e.g. application/pdf)"
          },
          "download_path": {
            "type": "string",
            "description": "Artifactory path to download the attachment file"
          }
        }
      },
      "SubjectView": {
        "type": "object",
        "description": "Subject name and version information",
        "properties": {
          "name": {
            "type": "string",
            "description": "Subject name"
          },
          "version": {
            "type": "string",
            "description": "Subject version"
          }
        }
      },
      "SigningKeyView": {
        "type": "object",
        "description": "The key used to sign the evidence",
        "properties": {
          "alias": {
            "type": "string",
            "description": "The alias of the signing key"
          }
        }
      },
      "Signature": {
        "type": "object",
        "description": "DSSE signature",
        "properties": {
          "keyid": {
            "type": "string",
            "description": "Signing key identifier",
            "example": "my-key"
          },
          "sig": {
            "type": "string",
            "description": "Base64-encoded DSSE signature value",
            "example": "MEUCIQDx1234567890abcdefghijklmnopqrstuvwxyz=="
          }
        }
      },
      "EvidenceListResponse": {
        "type": "object",
        "description": "Wrapper containing a list of evidence records",
        "properties": {
          "evidence": {
            "type": "array",
            "items": {
              "$ref": "#/components/schemas/EvidenceView"
            },
            "description": "List of evidence records"
          }
        }
      }
    },
    "securitySchemes": {
      "bearerAuth": {
        "type": "http",
        "scheme": "bearer",
        "bearerFormat": "JWT",
        "description": "JWT token authentication"
      }
    }
  },
  "security": [
    {
      "bearerAuth": []
    }
  ]
}
```