search and fetch features

[kchetans]

You can sarch sbom through sbomlc.db, for searching sbom used below command

./sbomex search --format json --spec cdx --tool trivy
  ID   TARGET                   QUALITY  TYPE      CREATOR       
5 centos:latest 7.39 cdx-json trivy-0.36.1
14 centos:centos7.9.2009 7.38 cdx-json trivy-0.36.1
23 centos:centos7 7.38 cdx-json trivy-0.36.1
32 centos:7.9.2009 7.38 cdx-json trivy-0.36.1
41 centos:7 7.38 cdx-json trivy-0.36.1
50 centos:centos8.4.2105 7.39 cdx-json trivy-0.36.1
59 centos:centos8 7.39 cdx-json trivy-0.36.1
68 centos:centos6.10 7.38 cdx-json trivy-0.36.1
77 centos:centos6 7.38 cdx-json trivy-0.36.1
86 centos:8.4.2105 7.39 cdx-json trivy-0.36.1
95 busybox:latest 3.25 cdx-json trivy-0.36.1
104 busybox:uclibc 3.25 cdx-json trivy-0.36.1
113 busybox:musl 3.25 cdx-json trivy-0.36.1
122 busybox:glibc 3.25 cdx-json trivy-0.36.1
131 busybox:1-uclibc 3.25 cdx-json trivy-0.36.1
140 busybox:1-musl 3.25 cdx-json trivy-0.36.1
149 busybox:1-glibc 3.25 cdx-json trivy-0.36.1
158 busybox:1 3.25 cdx-json trivy-0.36.1
167 busybox:unstable-uclibc 3.25 cdx-json trivy-0.36.1
176 busybox:unstable-glibc 3.25 cdx-json trivy-0.36.1
185 ubuntu:latest 7.47 cdx-json trivy-0.36.1
194 ubuntu:rolling 7.45 cdx-json trivy-0.36.1
203 ubuntu:lunar-20230128 7.40 cdx-json trivy-0.36.1
212 ubuntu:lunar 7.40 cdx-json trivy-0.36.1
221 ubuntu:kinetic-20230126 7.45 cdx-json trivy-0.36.1

Fetch one SBOMs from Interlynk's SBOM Repository You can fetch repositiry with filter and id

./sbomex fetch --id 2
./sbomex fetch --filter trivy
{
"SPDXID": "SPDXRef-DOCUMENT",
"creationInfo": {
"created": "2023-03-01T01:46:24.02786Z",
"creators": [
"Tool: trivy",
"Organization: aquasecurity"
]
},
"dataLicense": "CC0-1.0",
"documentDescribes": [
"SPDXRef-ContainerImage-d882765bfabf0cb8"
],
"documentNamespace": "http://aquasecurity.github.io/trivy/container_image/busybox:latest-d866c309-449f-42e2-8675-d47b21a4071d",
"name": "busybox:latest",
"packages": [
{
"SPDXID": "SPDXRef-ContainerImage-d882765bfabf0cb8",
"attributionTexts": [
"SchemaVersion: 2",
"ImageID: sha256:66ba00ad3de8677a3fa4bc4ea0fc46ebca0f14db46ca365e7f60833068dd0148",
"RepoDigest: busybox@sha256:7b3ccabffc97de872a30dfd234fd972a66d247c8cfc69b0550f276481852627c",
"RepoDigest: busybox@sha256:f2c7344e7c13f559171a602a16a49769cf524513d30379651afb5f0637cf6c27",
"DiffID: sha256:b64792c17e4ad443d16b218afb3a8f5d03ca0f4ec49b11c1a7aebe17f6c3c1d2",
"RepoTag: busybox:1",
"RepoTag: busybox:1-glibc",
"RepoTag: busybox:glibc",
"RepoTag: busybox:latest",
"RepoTag: busybox:unstable-glibc"
],
"externalRefs": [
{
"referenceCategory": "PACKAGE-MANAGER",
"referenceLocator": "pkg:oci/busybox@sha256:7b3ccabffc97de872a30dfd234fd972a66d247c8cfc69b0550f276481852627c?repository_url=index.docker.io%2Flibrary%2Fbusybox\u0026arch=amd64",
"referenceType": "purl"
}
],
"filesAnalyzed": false,
"name": "busybox:latest"
}
],
"relationships": [
{
"relatedSpdxElement": "SPDXRef-ContainerImage-d882765bfabf0cb8",
"relationshipType": "DESCRIBES",
"spdxElementId": "SPDXRef-DOCUMENT"
}
],
"spdxVersion": "SPDX-2.2"
}