$echo '{
< "items": [
< {
< "id": "synthetic-supplier-pass",
< "sbom": {
< "bomFormat": "CycloneDX",
< "specVersion": "1.6",
< "serialNumber": "urn:uuid:11111111-2222-4333-8444-555555555555",
< "version": 1,
< "metadata": {
< "timestamp": "2026-09-17T12:00:00Z",
< "tools": [
< {
< "vendor": "Example Invalid Labs",
< "name": "Synthetic SBOM Builder",
< "version": "1.0.0"
< }
< ],
< "component": {
< "type": "application",
< "bom-ref": "pkg:generic/example.invalid/supplier-app@1.0.0",
< "name": "supplier-app",
< "version": "1.0.0",
< "purl": "pkg:generic/example.invalid/supplier-app@1.0.0"
< }
< },
< "components": [
< {
< "type": "library",
< "bom-ref": "pkg:generic/example.invalid/clear-widget@2.1.0",
< "name": "clear-widget",
< "version": "2.1.0",
< "purl": "pkg:generic/example.invalid/clear-widget@2.1.0",
< "licenses": [
< {
< "license": {
< "id": "MIT"
< }
< }
< ]
< }
< ],
< "dependencies": [
< {
< "ref": "pkg:generic/example.invalid/supplier-app@1.0.0",
< "dependsOn": [
< "pkg:generic/example.invalid/clear-widget@2.1.0"
< ]
< },
< {
< "ref": "pkg:generic/example.invalid/clear-widget@2.1.0",
< "dependsOn": []
< }
< ]
< }
< }
< ],
< "policy": {
< "name": "synthetic-supplier-intake",
< "version": "1.0.0",
< "requireDocumentProvenance": true,
< "requiredComponentFields": [
< "name",
< "version"
< ],
< "deniedLicenses": [
< "GPL-3.0-only"
< ],
< "allowedLicenses": [],
< "unknownLicenseBehavior": "DENY",
< "deniedPurls": [],
< "requireRelationshipIntegrity": true
< }
<}' |
<apify call ceddl/sbom-policy-evidence-gate --silent --output-dataset