Specifies the artifact to upload. Dependency-Track supports uploading of CycloneDX and SPDX bill-of-materials (BOM) formats.

See Best Practices for additional information.

The value can contain environment variables in the form of ${VARIABLE_NAME} which are resolved.