Prerequisites

The following items are required to download and verify the SBOM:

• cosign (CLI)
  To verify the signature and download the SBOM attestation.
  Tool: https://github.com/sigstore/cosign/releases: new window
  Installation guidelines: https://docs.sigstore.dev/cosign/system_config/installation/: new window
• jq
  To read and format the JSON data.
  Tool: https://jqlang.org/download/: new window
• OCI-COSIGN-KEY-Fabasoft-RD-2023
  https://download.fabasoft.com/keys/: new window
• Registry access
  Username and password for read access to the public registry.