The most recent patch for this version is 26.2.1.  Learn more

Skip to main content

Software Bill of Materials

A Software Bill of Materials (SBOM) lists the components and dependencies of Axiomatics Policy DevOps (APD), so you can check them for security vulnerabilities and licenses.

APD provides SBOMs in two formats: SPDX, which focuses on licensing compliance, and CycloneDX, which focuses on security and vulnerability management. The SBOMs also list the known vulnerabilities of the components, and the SBOMs of all released APD versions are kept up to date with them.

warning

While the SBOMs contain license information for individual components, this data may sometimes be inconsistent with the LicensesOpens in a new tab page, which should always be considered the source of truth.

Download the SBOMs​

Download the SBOMs with the AWS CLI and your Axiomatics AWS credentials: your Axiomatics access key ID and secret access key. Give them to the AWS CLI with aws configure, or with the environment variables AWS_ACCESS_KEY_ID and AWS_SECRET_ACCESS_KEY. These names differ from the variables that APD reads, AXIOMATICS_ACCESS_KEY_ID and AXIOMATICS_SECRET_ACCESS_KEY. Then run the command for the format you need:

aws s3api get-object --bucket axiomatics-customer-artifacts --key releases/com/axiomatics/alfa/test/axiomatics-policy-devops-bundle/26.2.1/axiomatics-policy-devops-bundle-26.2.1-sbom-spdx2-enriched.json axiomatics-policy-devops-bundle-26.2.1-sbom-spdx2-enriched.json