wip

Signed-off-by: Jan Kowalleck <[email protected]>

Author: jkowalleck

tests/_data/snapshots/get_bom_with_component_evidence-1.6.xml.bin

@@ -30,6 +30,21 @@
       </licenses>
       <purl>pkg:pypi/[email protected]?extension=tar.gz</purl>
       <evidence>
+        <identity>
+          <field>hash</field>
+          <confidence>0.1</confidence>
+          <concludedValue>example-hash</concludedValue>
+          <methods>
+            <method>
+              <technique>attestation</technique>
+              <confidence>0.1</confidence>
+              <value>analysis-tool</value>
+            </method>
+          </methods>
+          <tools>
+            <tool ref="cbom:generator"/>
+          </tools>
+        </identity>
         <identity>
           <field>name</field>
           <confidence>0.9</confidence>