Evidence

Create one directory per product release.

Example:

0.1.0/
├── manifest.json
├── sbom.cdx.json
├── vulnerabilities.json
├── packages.txt
├── sha256sums.txt
├── network-surface.txt
├── nats-acl-test.txt
├── vpn-test.txt
├── update-test.txt
└── test-report.md

Evidence must be sanitized. Never commit private keys, seeds, customer e-mail addresses or access tokens.