Skip to main content

Logo
License CI Python 3.8 GitHub release

WS Joint SBOM Tool in SPDX format

CLI Tool to generate joint SBOM report in SPDX format from two SBOM reports.

  • The tool can generate mutual report from two SBOM reports just in JSON format.
  • Both source files should be in JSON format also.

Prerequisites

Python 3.9+

Installation and Execution by pulling package from PyPi:

  1. Execute pip install pip install ws-joint-sbom-reports
  2. Run report: ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE> -hf <HEAD_FILE>

Required and Optional arguments:

  -h, --help            show this help message and exit
  -f1 FIRST_FILE, --first_file
                  FIRST_FILE
  -f2 SECOND_FILE, --second_file 
                  SECOND_FILE
  -hf HEAD_FILE, --head_file 
                  Taking head of data from First file if True (default) or from second file if False 
    -o OUTPUT_FILE, --output_file 
                  OUTPUT_FILE

Examples:

# Create output report with head data from first file 
ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE>

# Create output report with head data from second file 
ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE> -hf False

Metadata

Release files for ws-joint-sbom-reports 0.0.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Built distribution (wheel)

Table of built distributions (wheels) for ws-joint-sbom-reports 0.0.4
File Interpreter ABI Platform Actions
ws_joint_sbom_reports-0.0.4-py3-none-any.whl Python 3 none any Details for ws_joint_sbom_reports-0.0.4-py3-none-any.whl

Release files / ws_joint_sbom_reports-0.0.4-py3-none-any.whl

Download URL ws_joint_sbom_reports-0.0.4-py3-none-any.whl
Size 8.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
ce444158540676d67a3ee86ee813676b1a57eb2697ddbb9076e4ebfe5365f4e0
BLAKE2b-256 checksum
How to use checksums
507703a20c26059e27f26f4db7da0c99889d0a271f06cdeabec6407200a1e7b1
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/4.0.1 CPython/3.9.13

Security for ws-joint-sbom-reports 0.0.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

0.0.4 This release

1 release file No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page