Validate supported CycloneDX 1.7 ML-BOM and SLSA provenance v1 envelopes against pinned schemas before semantic policy checks. Keep malformed-format findings distinct from missing security evidence.
No dependencies set.
The note is not visible to the blocked user.
Validate supported CycloneDX 1.7 ML-BOM and SLSA provenance v1 envelopes against pinned schemas before semantic policy checks. Keep malformed-format findings distinct from missing security evidence.