search

blackducksoftware / hub-rest-api-python

HUB REST API Python bindings
Apache License 2.0
89 stars 104 forks source link

SBOM import script #254

Closed swright-synopsys closed 8 months ago

swright-synopsys commented 9 months ago

Script to import a given SPDX file and validate the components in the resulting SBOM. Any missing components will be added to the SBOM as needed. Any components not present in the KB will be added as a custom component.

usage: parse_spdx.py [-h] --base-url BASE_URL --token-file TOKEN_FILE
                     --spdx-file SPDX_FILE --out-file OUT_FILE --project
                     PROJECT_NAME --version VERSION_NAME
                     [--license LICENSE_NAME] [--no-verify]
                     [--no-spdx-validate]
wangleo61 commented 9 months ago

That’s so cool.

Great job.

BR

Leo

On Nov 11, 2023, at 04:04, swright-synopsys @.***> wrote:

Script to import a given SPDX file and validate the components in the resulting SBOM. Any missing components will be added to the SBOM as needed. Any components not present in the KB will be added as a custom component.

usage: parse_spdx.py [-h] --base-url BASE_URL --token-file TOKEN_FILE --spdx-file SPDX_FILE --out-file OUT_FILE --project PROJECT_NAME --version VERSION_NAME [--license LICENSE_NAME] [--no-verify] [--no-spdx-validate]

You can view, comment on, or merge this pull request online at:

https://github.com/blackducksoftware/hub-rest-api-python/pull/254

Commit Summary

File Changes

(1 filehttps://github.com/blackducksoftware/hub-rest-api-python/pull/254/files)

Patch Links:

— Reply to this email directly, view it on GitHubhttps://github.com/blackducksoftware/hub-rest-api-python/pull/254, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AO5RA34YAOHRA4CA4XYRWLDYD2CFJAVCNFSM6AAAAAA7GUSY4GVHI2DSMVQWIX3LMV43ASLTON2WKOZRHE4DQMZRGA2DKMQ. You are receiving this because you are subscribed to this thread.Message ID: @.***>

nichollsdave commented 8 months ago

Approved - thanks Shane