Reports for Open Source Components
Dynatrace provides cryptographically signed Software Bill of Materials (SBOMs) and license notice files for selected products, with more being added over time.
Our SBOMs follow the CycloneDX standard and contain detailed, machine-readable inventories of every software component and dependency bundled within an artifact. They enable effective vulnerability management, identification of license compliance issues, and support end-to-end visibility of supply chain risks.
Current SBOM Coverage
| Dynatrace product | SBOM | How to retrieve & verify |
|---|---|---|
| ActiveGate Container Image (Regular & FIPS) | ✅ Provided via in-toto attestation | Verification Guide |
| ActiveGate Installer | ✅ Bundled with our signed installers | dynatrace-activegate-sbom.cdx.json is stored in the local ActiveGate installation folder |
| EdgeConnect Container Image | ✅ Provided via in-toto attestation | Verification Guide |
| Managed Installer | ✅ Bundled with our signed installers | Verification Guide |
| OneAgent Installer | ✅ Bundled with our signed installers | agentinstaller-sbom-external.cdx.json is stored in the local OneAgent installation folder |
| OneAgent Lambda Layers | ✅ Bundled with our signed ZIP file | sbom.cdx.json is stored in the root folder of an AWS Lambda ZIP file |
| Operator Container Image | ✅ Provided via in-toto attestation | Verification Guide |
| Synthetic Installer | ✅ Bundled with our signed installers | syntheticinstaller-sbom.cdx.json is stored in the local Synthetic installation folder |
Reports by Version
Dynatrace Managed
Dynatrace OneAgent
| Version | SBOM | License Notice File |
|---|---|---|
| 1.347 | SBOM for OneAgent 1.347 | Licenses for OneAgent 1.347 |
| 1.345 | SBOM for OneAgent 1.345 | Licenses for OneAgent 1.345 |
| 1.343 | SBOM for OneAgent 1.343 | Licenses for OneAgent 1.343 |
| 1.341 | SBOM for OneAgent 1.341 | Licenses for OneAgent 1.341 |
| 1.339 | SBOM for OneAgent 1.339 | Licenses for OneAgent 1.339 |
| 1.337 | Licenses for OneAgent 1.337 | |
| 1.335 | Licenses for OneAgent 1.335 | |
| 1.333 | Licenses for OneAgent 1.333 | |
| 1.331 | Licenses for OneAgent 1.331 | |
| 1.329 | Licenses for OneAgent 1.329 | |
| 1.327 | Licenses for OneAgent 1.327 | |
| 1.325 | Licenses for OneAgent 1.325 | |
| 1.323 | Licenses for OneAgent 1.323 |