search and fetch feature implemented

[kchetans]

You can sarch sbom through sbomlc.db, for searching sbom used below command

./sbomex search --format json --spec cdx --tool trivy
  ID   TARGET                   QUALITY  TYPE      CREATOR       

5 centos:latest 7.39 cdx-json trivy-0.36.1
14 centos:centos7.9.2009 7.38 cdx-json trivy-0.36.1
23 centos:centos7 7.38 cdx-json trivy-0.36.1
32 centos:7.9.2009 7.38 cdx-json trivy-0.36.1
41 centos:7 7.38 cdx-json trivy-0.36.1
50 centos:centos8.4.2105 7.39 cdx-json trivy-0.36.1
59 centos:centos8 7.39 cdx-json trivy-0.36.1
68 centos:centos6.10 7.38 cdx-json trivy-0.36.1
77 centos:centos6 7.38 cdx-json trivy-0.36.1
86 centos:8.4.2105 7.39 cdx-json trivy-0.36.1
95 busybox:latest 3.25 cdx-json trivy-0.36.1
104 busybox:uclibc 3.25 cdx-json trivy-0.36.1
113 busybox:musl 3.25 cdx-json trivy-0.36.1
122 busybox:glibc 3.25 cdx-json trivy-0.36.1
131 busybox:1-uclibc 3.25 cdx-json trivy-0.36.1
140 busybox:1-musl 3.25 cdx-json trivy-0.36.1
149 busybox:1-glibc 3.25 cdx-json trivy-0.36.1
158 busybox:1 3.25 cdx-json trivy-0.36.1
167 busybox:unstable-uclibc 3.25 cdx-json trivy-0.36.1
176 busybox:unstable-glibc 3.25 cdx-json trivy-0.36.1
185 ubuntu:latest 7.47 cdx-json trivy-0.36.1
194 ubuntu:rolling 7.45 cdx-json trivy-0.36.1
203 ubuntu:lunar-20230128 7.40 cdx-json trivy-0.36.1
212 ubuntu:lunar 7.40 cdx-json trivy-0.36.1
221 ubuntu:kinetic-20230126 7.45 cdx-json trivy-0.36.1

Fetch one SBOMs from Interlynk's SBOM Repository You can fetch repositiry with filter and id ./sbomex fetch --id 2

./sbomex fetch --filter trivy { "SPDXID": "SPDXRef-DOCUMENT", "creationInfo": { "created": "2023-03-01T01:46:24.02786Z", "creators": [ "Tool: trivy", "Organization: aquasecurity" ] }, "dataLicense": "CC0-1.0", "documentDescribes": [ "SPDXRef-ContainerImage-d882765bfabf0cb8" ], "documentNamespace": "http://aquasecurity.github.io/trivy/container_image/busybox:latest-d866c309-449f-42e2-8675-d47b21a4071d", "name": "busybox:latest", "packages": [ { "SPDXID": "SPDXRef-ContainerImage-d882765bfabf0cb8", "attributionTexts": [ "SchemaVersion: 2", "ImageID: sha256:66ba00ad3de8677a3fa4bc4ea0fc46ebca0f14db46ca365e7f60833068dd0148", "RepoDigest: busybox@sha256:7b3ccabffc97de872a30dfd234fd972a66d247c8cfc69b0550f276481852627c", "RepoDigest: busybox@sha256:f2c7344e7c13f559171a602a16a49769cf524513d30379651afb5f0637cf6c27", "DiffID: sha256:b64792c17e4ad443d16b218afb3a8f5d03ca0f4ec49b11c1a7aebe17f6c3c1d2", "RepoTag: busybox:1", "RepoTag: busybox:1-glibc", "RepoTag: busybox:glibc", "RepoTag: busybox:latest", "RepoTag: busybox:unstable-glibc" ], "externalRefs": [ { "referenceCategory": "PACKAGE-MANAGER", "referenceLocator": "pkg:oci/busybox@sha256:7b3ccabffc97de872a30dfd234fd972a66d247c8cfc69b0550f276481852627c?repository_url=index.docker.io%2Flibrary%2Fbusybox\u0026arch=amd64", "referenceType": "purl" } ], "filesAnalyzed": false, "name": "busybox:latest" } ], "relationships": [ { "relatedSpdxElement": "SPDXRef-ContainerImage-d882765bfabf0cb8", "relationshipType": "DESCRIBES", "spdxElementId": "SPDXRef-DOCUMENT" } ], "spdxVersion": "SPDX-2.2" }