Required Git Evidence Exists

Type: Rule
ID: required-git-evidence
Source: v2/rules/git/evidence-exists.yaml
Rego Source: evidence-exists.rego
Labels: SBOM, Git

Verify required Git evidence exists.

note

This rule requires Git SBOM. See here for more details.

tip

Evidence IS required for this rule and will fail if missing.

tip

Signed Evidence for this rule IS NOT required by default but is recommended.

warning

Rule requires evaluation with a target. Without one, it will be disabled unless the --all-evidence flag is provided.

info

Rule is scoped by product and target.

Usage example

uses: git/evidence-exists@v2

By confirming that all required evidence exists, this rule guarantees that a Source Code Bill of Materials (SBOM) is fully represented as evidence.