REQ 089

REQ-089: Provide configured SBOM reporting paths and outputs

Requirement

The engine shall provide the documented SBOM reporting paths for an explicitly configured project.

Rationale

The positive reporting outcome needs an allocated software contract, not only failure-policy requirements.

Fit Criterion

For native Windows and each supported Docker path, a successful configured project produces the documented CycloneDX 1.5 SBOM and pipeline-run.json; an enabled Grype scan produces its documented result, while a supported disabled scan is recorded as skipped. Preserve the documented mode and policy differences and do not imply a native Linux SBOM path.

Verification

Planned, TEST-091; existing behavior needs candidate-bound integration evidence.

Source

Software-Requirements-Specification

Priority

High

TestID

TEST-091

TestArtifact

Planned native Windows and Docker positive-path integration cases

CodeRef

Native and container SBOM pipelines

Status

Planned