# Reports for Open Source Components

Dynatrace provides cryptographically signed **Software Bill of Materials (SBOMs)** and **license notice files** for selected products, with more being added over time.

Our SBOMs follow the [CycloneDX standard](https://cyclonedx.org/) and contain detailed, machine-readable inventories of every software component and dependency bundled within an artifact. They enable effective vulnerability management, identification of license compliance issues, and support end-to-end visibility of supply chain risks.

## Current SBOM Coverage

| **Dynatrace product** | **SBOM** | **How to retrieve & verify** |
| --- | --- | --- |
| ActiveGate Container Image (Regular & FIPS) | ✅ Provided via [in-toto](https://in-toto.io/) attestation | [Verification Guide](https://docs.dynatrace.com/docs/shortlink/verify-image-signatures#dynatrace-activegate-sbom) |
| ActiveGate Installer | ✅ Bundled with our signed installers | `dynatrace-activegate-sbom.cdx.json` is stored in the local ActiveGate installation folder |
| EdgeConnect Container Image | ✅ Provided via [in-toto](https://in-toto.io/) attestation | [Verification Guide](https://docs.dynatrace.com/docs/shortlink/verify-image-signatures#dynatrace-edge-connect-sbom) |
| Managed Installer | ✅ Bundled with our signed installers | [Verification Guide](https://docs.dynatrace.com/managed/managed-cluster/installation/set-up-a-cluster#retrieve-sbom) |
| OneAgent Installer | ✅ Bundled with our signed installers | `agentinstaller-sbom-external.cdx.json` is stored in the local OneAgent installation folder |
| Operator Container Image | ✅ Provided via [in-toto](https://in-toto.io/) attestation | [Verification Guide](https://docs.dynatrace.com/docs/shortlink/verify-image-signatures#dynatrace-operator-sbom) |

## Reports by Version

### Dynatrace Managed

| **Version** | **SBOM** | **License Notice File** |
| --- | --- | --- |
| 1.344 | [SBOM for Cluster Managed 1.344](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.344-merged.json) | [Licenses for Cluster Managed 1.344](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.344_NOTICE.txt) |
| 1.342 | [SBOM for Cluster Managed 1.342](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.342-merged.json) | [Licenses for Cluster Managed 1.342](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.342_NOTICE.txt) |
| 1.340 | [SBOM for Cluster Managed 1.340](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.340-merged.json) | [Licenses for Cluster Managed 1.340](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.340_NOTICE.txt) |
| 1.338 | [SBOM for Cluster Managed 1.338](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.338-merged.json) | [Licenses for Cluster Managed 1.338](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.338-NOTICE.txt) |
| 1.336 | [SBOM for Cluster Managed 1.336](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.336-merged.json) | [Licenses for Cluster Managed 1.336](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.336_NOTICE.txt) |
| 1.334 | [SBOM for Cluster Managed 1.334](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.334-merged.json) | [Licenses for Cluster Managed 1.334](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.334_NOTICE.txt) |
| 1.332 |  | [Licenses for Cluster Managed 1.332](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/managed-1.332_NOTICE.txt) |
| 1.328 |  | [Licenses for Cluster Managed 1.328](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.328.csv) |
| 1.326 |  | [Licenses for Cluster Managed 1.326](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.326.csv) |
| 1.324 |  | [Licenses for Cluster Managed 1.324](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.324.csv) |
| 1.322 |  | [Licenses for Cluster Managed 1.322](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.322.csv) |
| 1.320 |  | [Licenses for Cluster Managed 1.320](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.320.csv) |
| 1.318 |  | [Licenses for Cluster Managed 1.318](https://assets.dynatrace.com/global/legal/open-source-components/cluster-managed/Dynatrace_Cluster_Managed_1.318.csv) |

### Dynatrace OneAgent

| **Version** | **SBOM** | **License Notice File** |
| --- | --- | --- |
| 1.343 | [SBOM for OneAgent 1.343](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/oneagent-1.341-merged.json) | [Licenses for OneAgent 1.343](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.343-NOTICE.txt) |
| 1.341 | [SBOM for OneAgent 1.341](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/oneagent-1.341-merged.json) | [Licenses for OneAgent 1.341](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.341-NOTICE.txt) |
| 1.339 | [SBOM for OneAgent 1.339](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent-1.339-merged.json) | [Licenses for OneAgent 1.339](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/oneagent-1.339-NOTICE.txt) |
| 1.337 |  | [Licenses for OneAgent 1.337](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.337.csv) |
| 1.335 |  | [Licenses for OneAgent 1.335](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.335.csv) |
| 1.333 |  | [Licenses for OneAgent 1.333](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.333.csv) |
| 1.331 |  | [Licenses for OneAgent 1.331](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.331.csv) |
| 1.329 |  | [Licenses for OneAgent 1.329](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.329.csv) |
| 1.327 |  | [Licenses for OneAgent 1.327](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.327.csv) |
| 1.325 |  | [Licenses for OneAgent 1.325](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.325.csv) |
| 1.323 |  | [Licenses for OneAgent 1.323](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.323.csv) |
| 1.321 |  | [Licenses for OneAgent 1.321](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.321.csv) |
| 1.319 |  | [Licenses for OneAgent 1.319](https://assets.dynatrace.com/global/legal/open-source-components/oneagent/Dynatrace_OneAgent_1.319.csv) |

### Dynatrace ActiveGate

| **Version** | **SBOM** | **License Notice File** |
| --- | --- | --- |
| 1.343 | [SBOM for ActiveGate 1.343](https://assets.dynatrace.com/global/legal/open-source-components/activegate/activegate-1.343-merged.json) | [Licenses for ActiveGate 1.343](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.343-NOTICE.txt) |
| 1.341 | [SBOM for ActiveGate 1.341](https://assets.dynatrace.com/global/legal/open-source-components/activegate/activegate-1.341-merged.json) | [Licenses for ActiveGate 1.341](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.341-NOTICE.txt) |
| 1.339 | [SBOM for ActiveGate 1.339](https://assets.dynatrace.com/global/legal/open-source-components/activegate/activegate-1.339-merged.json) | [Licenses for ActiveGate 1.339](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.339-NOTICE.txt) |
| 1.337 | [SBOM for ActiveGate 1.337](https://assets.dynatrace.com/global/legal/open-source-components/activegate/activegate-1.337-merged.json) | [Licenses for ActiveGate 1.337](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.337-NOTICE.txt) |
| 1.335 | [SBOM for ActiveGate 1.335](https://assets.dynatrace.com/global/legal/open-source-components/activegate/activegate-1.335-merged.json) | [Licenses for ActiveGate 1.335](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.335-NOTICE.txt) |
| 1.333 |  | [Licenses for ActiveGate 1.333](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_Activegate_1.333-NOTICE.txt) |
| 1.331 |  | [Licenses for ActiveGate 1.331](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.331-NOTICE.txt) |
| 1.329 |  | [Licenses for ActiveGate 1.329](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.329.csv) |
| 1.327 |  | [Licenses for ActiveGate 1.327](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.327.csv) |
| 1.325 |  | [Licenses for ActiveGate 1.325](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.325.csv) |
| 1.323 |  | [Licenses for ActiveGate 1.323](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.323.csv) |
| 1.321 |  | [Licenses for ActiveGate 1.321](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.321.csv) |
| 1.319 |  | [Licenses for ActiveGate 1.319](https://assets.dynatrace.com/global/legal/open-source-components/activegate/Dynatrace_ActiveGate_1.319.csv) |

### Dynatrace RUM JavaScript Agent

[Open source components for RUM JavaScript 1.295+](https://assets.dynatrace.com/global/legal/open-source-components/js-agent/RUM_JavaScript_tag_1.295.txt)