SBOM Policy Evidence Gate
Pricing
from $50.00 / 1,000 sbom policy evaluateds
Evaluate bounded CycloneDX or SPDX JSON SBOMs against a versioned technical policy and emit durable JSON and SARIF evidence.
Pricing
from $50.00 / 1,000 sbom policy evaluateds
Rating
0.0
(0)
Developer
Cedric Günther
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
a day ago
Last modified
Categories
Share
You can access the SBOM Policy Evidence Gate programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in API & Integrations in Apify Console.
1import { ApifyClient } from 'apify-client';2
3// Initialize the ApifyClient with your Apify API token4// Replace the '<YOUR_API_TOKEN>' with your token5const client = new ApifyClient({6 token: '<YOUR_API_TOKEN>',7});8
9// Prepare Actor input10const input = {11 "items": [12 {13 "id": "synthetic-supplier-pass",14 "sbom": {15 "bomFormat": "CycloneDX",16 "specVersion": "1.6",17 "serialNumber": "urn:uuid:11111111-2222-4333-8444-555555555555",18 "version": 1,19 "metadata": {20 "timestamp": "2026-09-17T12:00:00Z",21 "tools": [22 {23 "vendor": "Example Invalid Labs",24 "name": "Synthetic SBOM Builder",25 "version": "1.0.0"26 }27 ],28 "component": {29 "type": "application",30 "bom-ref": "pkg:generic/example.invalid/supplier-app@1.0.0",31 "name": "supplier-app",32 "version": "1.0.0",33 "purl": "pkg:generic/example.invalid/supplier-app@1.0.0"34 }35 },36 "components": [37 {38 "type": "library",39 "bom-ref": "pkg:generic/example.invalid/clear-widget@2.1.0",40 "name": "clear-widget",41 "version": "2.1.0",42 "purl": "pkg:generic/example.invalid/clear-widget@2.1.0",43 "licenses": [44 {45 "license": {46 "id": "MIT"47 }48 }49 ]50 }51 ],52 "dependencies": [53 {54 "ref": "pkg:generic/example.invalid/supplier-app@1.0.0",55 "dependsOn": [56 "pkg:generic/example.invalid/clear-widget@2.1.0"57 ]58 },59 {60 "ref": "pkg:generic/example.invalid/clear-widget@2.1.0",61 "dependsOn": []62 }63 ]64 }65 }66 ],67 "policy": {68 "name": "synthetic-supplier-intake",69 "version": "1.0.0",70 "requireDocumentProvenance": true,71 "requiredComponentFields": [72 "name",73 "version"74 ],75 "deniedLicenses": [76 "GPL-3.0-only"77 ],78 "allowedLicenses": [],79 "unknownLicenseBehavior": "DENY",80 "deniedPurls": [],81 "requireRelationshipIntegrity": true82 }83};84
85// Run the Actor and wait for it to finish86const run = await client.actor("ceddl/sbom-policy-evidence-gate").call(input);87
88// Fetch and print Actor results from the run's dataset (if any)89console.log('Results from dataset');90console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);91const { items } = await client.dataset(run.defaultDatasetId).listItems();92items.forEach((item) => {93 console.dir(item);94});95
96// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docsThe Apify API client for JavaScript is the official library that allows you to use SBOM Policy Evidence Gate API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.
Install the apify-client
$npm install apify-clientOther API clients include: