search

nyph-infosec / daggerboard

MIT License
95 stars 19 forks source link

Add ability to take in json files #20

Open samuelc7 opened 1 year ago

samuelc7 commented 1 year ago

I think it would be very useful for the daggerboard tool to be able to take in spdx data in the json format. Some SBOM generation tools (like microsoft's sbom-tool) outputs the sbom in the json format. It has all of the spdx data needed in order for daggerboard to work but the tool doesn't let us import json files.

I can get started working on this enhancement, if it's ok with you guys.

jstclair2019 commented 1 year ago

If I could add, I think this is a great idea.

namtarb commented 1 year ago

@samuelc7 - Absolutely, we're excited and open to collaboration! Once a pull request is submitted, we will review.

eroussy commented 11 months ago

Hi everyone

I don't know if this conversation is still going on, but here is a tool that can help : https://github.com/spdx/tools-python

It is maintained by the spdx team and can parse spdx document in json or spdx format. It is available as a python library. It could be interesting to use in Daggerboard.

I personally use it to convert json document to spdx before putting them in Daggerboard.

diabeatz96 commented 10 months ago

might take a look into this.