WS Joint SBOM Tool in SPDX format
CLI Tool to generate joint SBOM report in SPDX format from two SBOM reports.
- The tool can generate mutual report from two SBOM reports just in JSON format.
- Both source files should be in JSON format also.
Prerequisites
Python 3.9+
Installation and Execution by pulling package from PyPi:
- Execute pip install
pip install ws-joint-sbom-reports - Run report:
ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE> -hf <HEAD_FILE>
Required and Optional arguments:
-h, --help show this help message and exit
-f1 FIRST_FILE, --first_file
FIRST_FILE
-f2 SECOND_FILE, --second_file
SECOND_FILE
-hf HEAD_FILE, --head_file
Taking head of data from First file if True (default) or from second file if False
-o OUTPUT_FILE, --output_file
OUTPUT_FILE
Examples:
# Create output report with head data from first file
ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE>
# Create output report with head data from second file
ws_joint_sbom_reports -f1 <FIRST_FILE> -f2 <SECOND_FILE> -o <OUTPUT_FILE> -hf False
Metadata
Release files for ws-joint-sbom-reports 0.0.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| ws_joint_sbom_reports-0.0.4-py3-none-any.whl | Python 3 | none | any | Details for ws_joint_sbom_reports-0.0.4-py3-none-any.whl |
Release files / ws_joint_sbom_reports-0.0.4-py3-none-any.whl
| Download URL | ws_joint_sbom_reports-0.0.4-py3-none-any.whl |
|---|---|
| Size | 8.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
ce444158540676d67a3ee86ee813676b1a57eb2697ddbb9076e4ebfe5365f4e0
|
|
BLAKE2b-256 checksum How to use checksums |
507703a20c26059e27f26f4db7da0c99889d0a271f06cdeabec6407200a1e7b1
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/4.0.1 CPython/3.9.13
|
Security for ws-joint-sbom-reports 0.0.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.