Rio · pipeline receipt
Consumed → enriched → delivered → acknowledged
success · 2 artifacts · 2 delivery pairs
2026-09-27T23:54:36.858416Z → 2026-09-27T23:54:37.114483Z
Run run-a05bc355d0d5c8a397f3c009779fa991 · Rio 0.7.0
Unsigned recorded assertions and observations. Execution success does not prove receiver ingestion or retained content. Input/output hashes identify bytes; they do not authenticate the producer.
Consumed SBOMs and meaningful changes
api completed
- Consumed
api.cdx.json- Input SHA-256
1d2b04c0df452a4c2c34d84a6c195bb2805c3f208cf8f6c0bbe90ec54970dc01· 376 bytes- Output SHA-256
55e46a63a8b30ad6082b6c35dd43f0e5bc65d5cdd5ecd91126c09d0327f3d3e4· 2307 bytes
| Metadata | Before | After | Assertion / source |
|---|---|---|---|
build.idadd | absent | 42 | producer / context-file |
build.urladd | absent | https://ci.example.org/runs/42 | producer / context-file |
Gate pass (mode: fail) · Schema pass · Findings 0
Subject requirements: name version · Component requirements: name version purl
all components including nested · evaluated · components evaluated: 1 · 0 graph findings
worker completed
- Consumed
worker.cdx.json- Input SHA-256
721bd8311e643571b9e6fef197a8ffb41e8ff1cbde641d1c03bdd0cba2e012ef· 379 bytes- Output SHA-256
085265392b200e569cdda25bf92f83f48b0c0f178139699c71e5074c53d19229· 2316 bytes
| Metadata | Before | After | Assertion / source |
|---|---|---|---|
build.idadd | absent | 42 | producer / context-file |
build.urladd | absent | https://ci.example.org/runs/42 | producer / context-file |
Gate pass (mode: fail) · Schema pass · Findings 0
Subject requirements: name version · Component requirements: name version purl
all components including nested · evaluated · components evaluated: 1 · 0 graph findings
Destinations and acknowledgments
api → security accepted
- Receiver URL
https://127.0.0.1:53946(dependency-track)- Project name
api- Project version
1.0.0- Transport
- https · TLS observed · Certificate verification enforced
- Attempt
fb6fb2d3574883c0384f895097662dc9· 2026-09-27T23:54:37.002093Z- Request may have occurred
- true
- Intended bytes
- Output of
api· sbom · application/vnd.cyclonedx+json - Submitted bytes
- Output of
api· sbom · application/vnd.cyclonedx+json - acknowledgment
- accepted · HTTP 200 · accepted · TLS observed · 2026-09-27T23:54:37.014772Z
- dependency-track:event-token
11111111-1111-4111-8111-111111111111
worker → security accepted
- Receiver URL
https://127.0.0.1:53946(dependency-track)- Project name
worker- Project version
1.0.0- Transport
- https · TLS observed · Certificate verification enforced
- Attempt
de6cfed6324be03b32e23eb9b77ace59· 2026-09-27T23:54:37.071721Z- Request may have occurred
- true
- Intended bytes
- Output of
worker· sbom · application/vnd.cyclonedx+json - Submitted bytes
- Output of
worker· sbom · application/vnd.cyclonedx+json - acknowledgment
- accepted · HTTP 200 · accepted · TLS observed · 2026-09-27T23:54:37.075776Z
- dependency-track:event-token
22222222-2222-4222-8222-222222222222