SYS REQ 013

SYS-REQ-013: Configured SBOM reporting paths

Requirement

The system shall execute configured SBOM reporting through the supported native or containerized path.

Rationale

Consumers need a reproducible output and explicit platform-specific policy.

Fit Criterion

A successful configured project produces the documented CycloneDX 1.5 SBOM and per-project run record; an enabled Grype scan produces its documented result, while a supported disabled scan is recorded as skipped. Native Windows and Docker paths retain their documented policy differences, and no native Linux SBOM path is implied.

Verification

Planned positive-path integration verification; TEST-091 and allocated TEST-007, TEST-022 through TEST-029.

Source

System-Requirements-Specification

Priority

High

TestID

TEST-007, TEST-024, TEST-029, TEST-091

TestArtifact

Planned positive-path integration

CodeRef

REQ-007, REQ-022, REQ-023, REQ-024, REQ-025, REQ-026, REQ-027, REQ-028, REQ-029, REQ-089

Status

Planned