Software Supply Chain Transparency
Reports for Open Source Components
Dynatrace provides cryptographically signed Software Bill of Materials (SBOMs) and license notice files for selected products, with more being added over time.
Our SBOMs follow the CycloneDX standard and contain detailed, machine-readable inventories of every software component and dependency bundled within an artifact. They enable effective vulnerability management, identification of license compliance issues, and support end-to-end visibility of supply chain risks.
Current SBOM Coverage
| Dynatrace product | SBOM | How to retrieve & verify |
|---|---|---|
| ActiveGate Container Image (Regular & FIPS) | ✅ Provided via in-toto attestation | Verification Guide |
| ActiveGate Installer | ✅ Bundled with our signed installers | dynatrace-activegate-sbom.cdx.json is stored in the local ActiveGate installation folder |
| EdgeConnect Container Image | ✅ Provided via in-toto attestation | Verification Guide |
| Managed Installer | ✅ Bundled with our signed installers | Verification Guide |
| OneAgent Installer | ✅ Bundled with our signed installers | agentinstaller-sbom-external.cdx.json is stored in the local OneAgent installation folder |
| Operator Container Image | ✅ Provided via in-toto attestation | Verification Guide |
Reports by Version
Dynatrace Managed
Dynatrace OneAgent
| Version | SBOM | License Notice File |
|---|---|---|
| 1.343 | SBOM for OneAgent 1.343 | Licenses for OneAgent 1.343 |
| 1.341 | SBOM for OneAgent 1.341 | Licenses for OneAgent 1.341 |
| 1.339 | SBOM for OneAgent 1.339 | Licenses for OneAgent 1.339 |
| 1.337 | Licenses for OneAgent 1.337 | |
| 1.335 | Licenses for OneAgent 1.335 | |
| 1.333 | Licenses for OneAgent 1.333 | |
| 1.331 | Licenses for OneAgent 1.331 | |
| 1.329 | Licenses for OneAgent 1.329 | |
| 1.327 | Licenses for OneAgent 1.327 | |
| 1.325 | Licenses for OneAgent 1.325 | |
| 1.323 | Licenses for OneAgent 1.323 | |
| 1.321 | Licenses for OneAgent 1.321 | |
| 1.319 | Licenses for OneAgent 1.319 |
Dynatrace ActiveGate
| Version | SBOM | License Notice File |
|---|---|---|
| 1.343 | SBOM for ActiveGate 1.343 | Licenses for ActiveGate 1.343 |
| 1.341 | SBOM for ActiveGate 1.341 | Licenses for ActiveGate 1.341 |
| 1.339 | SBOM for ActiveGate 1.339 | Licenses for ActiveGate 1.339 |
| 1.337 | SBOM for ActiveGate 1.337 | Licenses for ActiveGate 1.337 |
| 1.335 | SBOM for ActiveGate 1.335 | Licenses for ActiveGate 1.335 |
| 1.333 | Licenses for ActiveGate 1.333 | |
| 1.331 | Licenses for ActiveGate 1.331 | |
| 1.329 | Licenses for ActiveGate 1.329 | |
| 1.327 | Licenses for ActiveGate 1.327 | |
| 1.325 | Licenses for ActiveGate 1.325 | |
| 1.323 | Licenses for ActiveGate 1.323 | |
| 1.321 | Licenses for ActiveGate 1.321 | |
| 1.319 | Licenses for ActiveGate 1.319 |