search

spdx / tools-golang

Collection of Go packages to work with SPDX files
Other
116 stars 54 forks source link

XLS Support #244

Open dor-hayun opened 1 month ago

dor-hayun commented 1 month ago

Hi, are you planning to add support for XLS/CSV formats? and if so, when it's supposed to be released? Thanks!

kzantow commented 1 month ago

Hi, @dor-hayun. I can't say for sure, but I don't believe anyone is actively working on XLS or CSV formats. Since SPDX 3.0 is released, we will be looking to add support for that, but there isn't an XLS or CSV compatible format for SPDX 3 that I'm aware of, so I don't think there will be a focus on those formats.

That said, we definitely welcome contributions if this is something you would be interested in adding! There was a PR for this a while ago, but this got closed as it was out of sync with main: https://github.com/spdx/tools-golang/pull/138; I don't know the status of that PR aside from it needing to be rebased.

But, more generally, what exactly are you looking to do with these formats? It is unlikely that either of these formats would provide the detail that JSON provides, which could make it challenging to support them in a meaningful way. If you're just looking to get a list of packages or files or something similar, you could probably use jq with the JSON format to quickly extract this information. And I'd be remiss if I didn't mention that Syft is able to convert between formats, including the table and template outputs, which could be an easy way to get a list of packages, if that's what you are trying to do.