diff --git a/linter_exclusions.yml b/linter_exclusions.yml
index 5105cb7f34b..39d7553115b 100644
--- a/linter_exclusions.yml
+++ b/linter_exclusions.yml
@@ -3516,3 +3516,9 @@ confcom fragment attach:
     signed_fragment:
       rule_exclusions:
         - no_positional_parameters
+
+confcom fragment references from_image:
+  parameters:
+    image:
+      rule_exclusions:
+        - no_positional_parameters
diff --git a/src/confcom/azext_confcom/_help.py b/src/confcom/azext_confcom/_help.py
index 9817bef723e..55781e5d13d 100644
--- a/src/confcom/azext_confcom/_help.py
+++ b/src/confcom/azext_confcom/_help.py
@@ -321,3 +321,28 @@
         - name: Attach the output of acifragmentgen to a registry
           text: az confcom acifragmentgen --chain my.cert.pem --key my_key.pem --svn "1" --namespace contoso --feed "test-feed" --input ./fragment_spec.json | az confcom fragment attach --manifest-tag myregistry.azurecr.io/image:latest
 """
+
+helps[
+    "confcom fragment references"
+] = """
+    type: group
+    short-summary: Commands which generate Security Policy Fragment References.
+"""
+
+
+helps[
+    "confcom fragment references from_image"
+] = """
+    type: command
+    short-summary: Create a Security Policy Fragment Reference based on an image reference.
+
+    parameters:
+        - name: --minimum-svn
+          type: str
+          short-summary: 'The value of the minimum SVN field in the generated fragment reference, defaults to current fragment reference'
+
+
+    examples:
+        - name: Input an image reference and generate fragment reference
+          text: az confcom fragment references from_image my.azurecr.io/myimage:tag
+"""
diff --git a/src/confcom/azext_confcom/_params.py b/src/confcom/azext_confcom/_params.py
index d75ce70abc1..3491ea4c974 100644
--- a/src/confcom/azext_confcom/_params.py
+++ b/src/confcom/azext_confcom/_params.py
@@ -235,6 +235,14 @@ def load_arguments(self, _):
             required=False,
             help='Container definitions to include in the policy'
         )
+        c.argument(
+            "fragment_definitions",
+            options_list=['--with-fragments'],
+            action='append',
+            type=json.loads,
+            required=False,
+            help='Fragment definitions to include in the policy'
+        )
 
     with self.argument_context("confcom acifragmentgen") as c:
         c.argument(
@@ -469,3 +477,16 @@ def load_arguments(self, _):
             help="Path to containerd socket if not using the default",
             validator=validate_katapolicygen_input,
         )
+
+    with self.argument_context("confcom fragment references from_image") as c:
+        c.positional(
+            "image",
+            type=str,
+            help="Image to create container definition from",
+        )
+        c.argument(
+            "minimum_svn",
+            required=False,
+            type=str,
+            help="Minimum Allowed Software Version Number for Fragment",
+        )
diff --git a/src/confcom/azext_confcom/command/fragment_references_from_image.py b/src/confcom/azext_confcom/command/fragment_references_from_image.py
new file mode 100644
index 00000000000..19b6ef4a13d
--- /dev/null
+++ b/src/confcom/azext_confcom/command/fragment_references_from_image.py
@@ -0,0 +1,14 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import json
+
+from typing import Optional
+
+from azext_confcom.lib.fragment_references import from_image as lib_fragment_references_from_image
+
+
+def fragment_references_from_image(image: str, minimum_svn: Optional[str]) -> str:
+    return print(json.dumps(list(lib_fragment_references_from_image(image, minimum_svn))))
diff --git a/src/confcom/azext_confcom/commands.py b/src/confcom/azext_confcom/commands.py
index 7e1e93eabca..f9582ada29c 100644
--- a/src/confcom/azext_confcom/commands.py
+++ b/src/confcom/azext_confcom/commands.py
@@ -17,3 +17,6 @@ def load_command_table(self, _):
 
     with self.command_group("confcom"):
         pass
+
+    with self.command_group("confcom fragment references") as g:
+        g.custom_command("from_image", "fragment_references_from_image")
diff --git a/src/confcom/azext_confcom/custom.py b/src/confcom/azext_confcom/custom.py
index 1b243a31370..7b4cba2320a 100644
--- a/src/confcom/azext_confcom/custom.py
+++ b/src/confcom/azext_confcom/custom.py
@@ -25,6 +25,9 @@
     print_existing_policy_from_yaml, print_func, str_to_sha256)
 from azext_confcom.command.fragment_attach import fragment_attach as _fragment_attach
 from azext_confcom.command.fragment_push import fragment_push as _fragment_push
+from azext_confcom.command.fragment_references_from_image import (
+    fragment_references_from_image as _fragment_references_from_image
+)
 from knack.log import get_logger
 from pkg_resources import parse_version
 
@@ -57,6 +60,7 @@ def acipolicygen_confcom(
     include_fragments: bool = False,
     fragments_json: str = None,
     exclude_default_fragments: bool = False,
+    fragment_definitions: Optional[list] = None,
 ):
     if print_existing_policy or outraw or outraw_pretty_print:
         logger.warning(
@@ -165,6 +169,10 @@ def acipolicygen_confcom(
             container_definitions=container_definitions,
         )
 
+    if fragment_definitions:
+        for fragment_definition in fragment_definitions:
+            container_group_policies._fragments.extend(fragment_definition)  # pylint: disable=protected-access
+
     exit_code = 0
 
     # standardize the output so we're only operating on arrays
@@ -552,3 +560,13 @@ def fragment_push(
         signed_fragment=signed_fragment,
         manifest_tag=manifest_tag
     )
+
+
+def fragment_references_from_image(
+    image: str,
+    minimum_svn: Optional[str],
+) -> None:
+    _fragment_references_from_image(
+        image=image,
+        minimum_svn=minimum_svn,
+    )
diff --git a/src/confcom/azext_confcom/lib/cose.py b/src/confcom/azext_confcom/lib/cose.py
new file mode 100644
index 00000000000..3cdcaf7cbd8
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/cose.py
@@ -0,0 +1,66 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import hashlib
+import platform
+import re
+import requests
+import subprocess
+
+from typing import Iterable
+from pathlib import Path
+
+from azext_confcom.lib.paths import get_binaries_dir
+
+
+_binaries_dir = get_binaries_dir()
+_cosesign1_binaries = {
+    "Linux": {
+        "path": _binaries_dir / "sign1util",
+        "url": "https://github.com/microsoft/cosesign1go/releases/download/v1.4.0/sign1util",
+        "sha256": "526b54aeb6293fc160e8fa1f81be6857300aba9641d45955f402f8b082a4d4a5",
+    },
+    "Windows": {
+        "path": _binaries_dir / "sign1util.exe",
+        "url": "https://github.com/microsoft/cosesign1go/releases/download/v1.4.0/sign1util.exe",
+        "sha256": "f33cccf2b1bb8c3a495c730984b47d0f0715678981dbfe712248a2452dd53303",
+    },
+}
+
+
+def cose_get():
+    for binary_info in _cosesign1_binaries.values():
+        cosesign1_fetch_resp = requests.get(binary_info["url"], verify=True)
+        cosesign1_fetch_resp.raise_for_status()
+
+        assert hashlib.sha256(cosesign1_fetch_resp.content).hexdigest() == binary_info["sha256"]
+
+        with open(binary_info["path"], "wb") as f:
+            f.write(cosesign1_fetch_resp.content)
+
+
+def cose_run(args: Iterable[str]) -> subprocess.CompletedProcess:
+    return subprocess.run(
+        [_cosesign1_binaries[platform.system()]["path"], *args],
+        check=True,
+        stdout=subprocess.PIPE,
+        text=True,
+    )
+
+
+def cose_print(file_path: Path):
+    return cose_run([
+        "print",
+        "--in", file_path.as_posix(),
+    ]).stdout.strip()
+
+
+def cose_get_properties(file_path: Path):
+    cose_print_output = cose_print(file_path)
+    return {
+        "iss": re.search(r"^iss:\s*(.*)$", cose_print_output, re.MULTILINE).group(1),
+        "feed": re.search(r"^feed:[ \t]*([^\r\n]*)", cose_print_output, re.MULTILINE).group(1),
+        "payload": re.search(r"^payload:\s*(.*)", cose_print_output, re.MULTILINE | re.DOTALL).group(1),
+    }
diff --git a/src/confcom/azext_confcom/lib/fragment_references.py b/src/confcom/azext_confcom/lib/fragment_references.py
new file mode 100644
index 00000000000..e27f0c03d50
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/fragment_references.py
@@ -0,0 +1,37 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import tempfile
+
+from typing import Optional
+
+from azext_confcom.lib.cose import cose_get_properties
+from azext_confcom.lib.fragments import get_fragments_from_image
+from azext_confcom.lib.serialization import rego_eval
+
+
+def from_image(image: str, minimum_svn: Optional[str]):
+
+    for signed_fragment in get_fragments_from_image(image):
+
+        cose_properties = cose_get_properties(signed_fragment)
+
+        with tempfile.NamedTemporaryFile("w+b") as payload:
+            payload.write(cose_properties["payload"].encode("utf-8"))
+            payload.flush()
+
+            fragment_properties = rego_eval(payload.name)
+
+            yield {
+                "feed": cose_properties["feed"],
+                "includes": sorted(list(set(fragment_properties.keys()).intersection({
+                    "containers",
+                    "fragmnents",
+                    "namespace",
+                    "external_processes",
+                }))),
+                "issuer": cose_properties["iss"],
+                "minimum_svn": minimum_svn or fragment_properties["svn"],
+            }
diff --git a/src/confcom/azext_confcom/lib/fragments.py b/src/confcom/azext_confcom/lib/fragments.py
new file mode 100644
index 00000000000..e72ae1072e0
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/fragments.py
@@ -0,0 +1,21 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import tempfile
+
+from pathlib import Path
+
+from azext_confcom.lib.images import sanitize_image_reference
+from azext_confcom.lib.oras import get_artifact_references, pull
+
+
+def get_fragments_from_image(image_reference: str):
+
+    for reference in get_artifact_references(image_reference):
+
+        fragment_path = Path(tempfile.gettempdir()) / sanitize_image_reference(reference)
+        pull(reference, fragment_path)
+
+        yield from fragment_path.glob("*.rego.cose")
diff --git a/src/confcom/azext_confcom/lib/images.py b/src/confcom/azext_confcom/lib/images.py
new file mode 100644
index 00000000000..06f2f59bbc2
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/images.py
@@ -0,0 +1,70 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import functools
+import os
+import re
+import subprocess
+import docker
+
+
+@functools.lru_cache()
+def get_image(image_ref: str) -> docker.models.images.Image:
+
+    client = docker.from_env()
+
+    try:
+        image = client.images.get(image_ref)
+    except docker.errors.ImageNotFound:
+        client.images.pull(image_ref)
+
+    image = client.images.get(image_ref)
+    return image
+
+
+def get_image_layers(image: str) -> list[str]:
+
+    binary_path = os.path.join(os.path.dirname(os.path.realpath(__file__)), "..", "bin", "dmverity-vhd")
+
+    get_image(image)
+    result = subprocess.run(
+        [binary_path, "-d", "roothash", "-i", image],
+        stdout=subprocess.PIPE,
+        stderr=subprocess.PIPE,
+        check=True,
+        text=True,
+    )
+
+    return [line.split("hash: ")[-1] for line in result.stdout.splitlines()]
+
+
+def get_image_config(image: str) -> dict:
+
+    image_config = get_image(image).attrs.get("Config")
+
+    config = {}
+
+    if image_config.get("Cmd") or image_config.get("Entrypoint"):
+        config["command"] = (
+            image_config.get("Entrypoint") or [] +
+            image_config.get("Cmd") or []
+        )
+
+    if image_config.get("Env"):
+        config["env_rules"] = [{
+            "pattern": p,
+            "strategy": "string",
+            "required": False,
+        } for p in image_config.get("Env")]
+
+    if image_config.get("WorkingDir"):
+        config["working_dir"] = image_config.get("WorkingDir")
+
+    return config
+
+
+def sanitize_image_reference(image_reference: str) -> str:
+    illegal = r'<>:"/\\|?*@\0'
+    return re.sub(f"[{re.escape(illegal)}]", "-", image_reference)
diff --git a/src/confcom/azext_confcom/lib/oras.py b/src/confcom/azext_confcom/lib/oras.py
new file mode 100644
index 00000000000..c429f242d74
--- /dev/null
+++ b/src/confcom/azext_confcom/lib/oras.py
@@ -0,0 +1,61 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import shutil
+import json
+import subprocess
+
+from pathlib import Path
+from typing import Iterable
+
+from azext_confcom.errors import eprint
+
+
+def oras_run(args: Iterable[str]) -> subprocess.CompletedProcess:
+
+    # Maintain existing behaviour of requiring the user to install ORAS themselves
+    if not shutil.which("oras"):
+        eprint("ORAS CLI not installed. Please install ORAS CLI: https://oras.land/docs/installation")
+
+    return subprocess.run(
+        ["oras", *args],
+        check=True,
+        stdout=subprocess.PIPE,
+        stderr=subprocess.DEVNULL,
+        text=True,
+    )
+
+
+def discover(reference: str):
+    return json.loads(oras_run([
+        "discover",
+        "--format",
+        "json",
+        reference,
+    ]).stdout.strip())
+
+
+def pull(reference: str, destination: Path):
+    return oras_run([
+        "pull",
+        "--output",
+        destination.as_posix(),
+        reference,
+    ])
+
+
+def get_artifact_references(reference: str):
+
+    def get_references(discover_result):
+        if "artifactType" in discover_result:
+            yield discover_result["reference"]
+        for field in discover_result.values():
+            if isinstance(field, list):
+                for item in field:
+                    yield from get_references(item)
+            if isinstance(field, dict):
+                yield from get_references(field)
+
+    return list(get_references(discover(reference)))
diff --git a/src/confcom/azext_confcom/lib/serialization.py b/src/confcom/azext_confcom/lib/serialization.py
index 7702bfef8ba..947c5863d60 100644
--- a/src/confcom/azext_confcom/lib/serialization.py
+++ b/src/confcom/azext_confcom/lib/serialization.py
@@ -76,7 +76,7 @@ def fragment_serialize(fragment: Fragment):
 """)
 
 
-def policy_deserialize(file_path: str):
+def rego_eval(file_path: str):
 
     with open(file_path, 'r') as f:
         content = f.readlines()
@@ -124,6 +124,13 @@ def _brace_delta(line: str) -> int:
 
         line_idx += 1
 
+    return policy_json
+
+
+def policy_deserialize(file_path: str):
+
+    policy_json = rego_eval(file_path)
+
     PolicyType = Policy if policy_json.get("package") == "policy" else Fragment
 
     raw_fragments = policy_json.pop("fragments", [])
diff --git a/src/confcom/azext_confcom/tests/conftest.py b/src/confcom/azext_confcom/tests/conftest.py
index abe3a1b6315..6874d3187a3 100644
--- a/src/confcom/azext_confcom/tests/conftest.py
+++ b/src/confcom/azext_confcom/tests/conftest.py
@@ -5,6 +5,7 @@
 
 import fcntl
 import importlib
+import json
 import os
 import subprocess
 import tempfile
@@ -12,9 +13,13 @@
 import pytest
 import sys
 import shutil
+import zipfile
 
 from pathlib import Path
-import zipfile
+
+
+CONFCOM_DIR = Path(__file__).parent.parent.parent
+SAMPLES_DIR = CONFCOM_DIR / "samples"
 
 
 # This fixture ensures tests are run against final built wheels of the extension
@@ -89,3 +94,55 @@ def run_on_wheel(request):
             importlib.import_module(module.__name__)
 
     yield
+
+
+@pytest.fixture()
+def docker_image():
+
+    registry_id = subprocess.run(
+        ["docker", "run", "-d", "-p", "0:5000", "registry:2"],
+        stdout=subprocess.PIPE,
+        text=True,
+    ).stdout
+
+    registry_port = subprocess.run(
+        ["docker", "port", registry_id],
+        stdout=subprocess.PIPE,
+        text=True,
+    ).stdout.split(":")[-1].strip()
+
+    test_container_ref = f"localhost:{registry_port}/hello-world:latest"
+    subprocess.run(["docker", "pull", "hello-world"])
+    subprocess.run(["docker", "tag", "hello-world", test_container_ref])
+    subprocess.run(["docker", "push", test_container_ref])
+
+    with tempfile.NamedTemporaryFile(mode="w+", encoding="utf-8", delete=True) as temp_file:
+        json.dump({
+            "version": "1.0.0",
+            "containers": [
+                {
+                    "name": "hello-world",
+                    "properties": {
+                        "image": test_container_ref,
+                    },
+                }
+            ]
+        }, temp_file)
+        temp_file.flush()
+
+        yield test_container_ref, temp_file.name
+
+    subprocess.run(["docker", "stop", registry_id])
+
+
+@pytest.fixture(scope="session")
+def cert_chain():
+    with tempfile.TemporaryDirectory() as temp_dir:
+        subprocess.run(
+            [
+                (SAMPLES_DIR / "certs" / "create_certchain.sh").as_posix(),
+                temp_dir
+            ],
+            check=True,
+        )
+        yield temp_dir
diff --git a/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py b/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
index e46b8e6385a..cc1919d251c 100644
--- a/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
+++ b/src/confcom/azext_confcom/tests/latest/test_confcom_acifragmentgen.py
@@ -3,71 +3,14 @@
 # Licensed under the MIT License. See License.txt in the project root for license information.
 # --------------------------------------------------------------------------------------------
 
-import contextlib
 import io
 import json
 import os
 import subprocess
 import tempfile
-import pytest
 
 from azext_confcom.custom import acifragmentgen_confcom, fragment_push, fragment_attach
 
-TEST_DIR = os.path.abspath(os.path.join(os.path.abspath(__file__), ".."))
-SAMPLES_DIR = os.path.abspath(os.path.join(TEST_DIR, "..", "..", "..", "samples"))
-
-
-@pytest.fixture()
-def docker_image():
-
-    registry_id = subprocess.run(
-        ["docker", "run", "-d", "-p", "0:5000", "registry:2"],
-        stdout=subprocess.PIPE,
-        text=True,
-    ).stdout
-
-    registry_port = subprocess.run(
-        ["docker", "port", registry_id],
-        stdout=subprocess.PIPE,
-        text=True,
-    ).stdout.split(":")[-1].strip()
-
-    test_container_ref = f"localhost:{registry_port}/hello-world:latest"
-    subprocess.run(["docker", "pull", "hello-world"])
-    subprocess.run(["docker", "tag", "hello-world", test_container_ref])
-    subprocess.run(["docker", "push", test_container_ref])
-
-    with tempfile.NamedTemporaryFile(mode="w+", encoding="utf-8", delete=True) as temp_file:
-        json.dump({
-            "version": "1.0.0",
-            "containers": [
-                {
-                    "name": "hello-world",
-                    "properties": {
-                        "image": test_container_ref,
-                    },
-                }
-            ]
-        }, temp_file)
-        temp_file.flush()
-
-        yield test_container_ref, temp_file.name
-
-    subprocess.run(["docker", "stop", registry_id])
-
-
-@pytest.fixture(scope="session")
-def cert_chain():
-    with tempfile.TemporaryDirectory() as temp_dir:
-        subprocess.run(
-            [
-                os.path.join(SAMPLES_DIR, "certs", "create_certchain.sh"),
-                temp_dir
-            ],
-            check=True,
-        )
-        yield temp_dir
-
 
 def test_acifragmentgen_fragment_gen(docker_image):
 
diff --git a/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py b/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py
new file mode 100644
index 00000000000..780b7457a7d
--- /dev/null
+++ b/src/confcom/azext_confcom/tests/latest/test_confcom_fragment_reference_from_image.py
@@ -0,0 +1,58 @@
+# --------------------------------------------------------------------------------------------
+# Copyright (c) Microsoft Corporation. All rights reserved.
+# Licensed under the MIT License. See License.txt in the project root for license information.
+# --------------------------------------------------------------------------------------------
+
+import json
+import subprocess
+
+from contextlib import redirect_stdout
+from io import StringIO
+from pathlib import Path
+
+from azext_confcom.command.fragment_references_from_image import fragment_references_from_image
+
+
+CONFCOM_DIR = Path(__file__).parent.parent.parent.parent
+SAMPLES_DIR = CONFCOM_DIR / "samples"
+
+
+def test_fragment_reference_from_image(docker_image):
+
+    image_ref, spec_file_path = docker_image
+    signed_fragment_path = SAMPLES_DIR / "fragments" / "fragment.rego.cose"
+
+    # Attach a signed fragment to the image
+    subprocess.run(
+        [
+            "oras",
+            "attach",
+            "--artifact-type",
+            "application/x-ms-ccepolicy-frag",
+            image_ref,
+            signed_fragment_path.name,
+        ],
+        check=True,
+        timeout=120,
+        cwd=signed_fragment_path.parent.as_posix(),
+    )
+
+    # Generate the fragment reference
+    buffer = StringIO()
+    with redirect_stdout(buffer):
+        fragment_references_from_image(
+            image=image_ref,
+            minimum_svn=None,
+        )
+
+    fragment_references = json.loads(buffer.getvalue())
+
+    # Check the reference looks as expected
+    assert fragment_references == [
+        {
+            'feed': '',
+            'includes': ['containers'],
+            'issuer': 'did:x509:0:sha256:q2YUkwrO2Ufcq66-CXKS9CA-XZMqFMbFom99GjaR2eI::subject:CN:Contoso',
+            'minimum_svn': '1'
+        }
+    ]