search

spdx / tools-python

A Python library to parse, validate and create SPDX documents.
http://spdx.org
Apache License 2.0
178 stars 130 forks source link

Add SPDX Document Merge #26

Open abuhman opened 7 years ago

abuhman commented 7 years ago

This would be a merge to combine two SPDX documents without losing any of the license information. An example use case: A SPDX document including human input is already created, but a new document is automatically generated with a scanner and we wish to merge the two without losing the modifications made by a human.

ndip007 commented 6 years ago

@abuhman @pombredanne

I would like to take this on. For this, I suggest another entry point for this command, and in the first place, only tv to tv spdx document support. Please I would like to know what you think about this issue, prior to me taking this on.

This could be fun! Thanks

pombredanne commented 6 years ago

The key thing is that you need to work on 2 documents at a time, merging them at the object level. The final write is not a problem IMHO, the hard part is the merge at the object level

avirlrma commented 6 years ago

@pombredanne I have started working on merging two rdf documents while @ndip007 works on the tv format.

marcindulak commented 1 year ago

How does this issue compare to the scope of https://wiki.spdx.org/view/GSOC/GSOC_ProjectIdeas#SBOM_combiner? From looking at the tools-python, tools-java and tools-golang it looks like GSOC didn't pick it up, is it still planned? It was mentioned also in https://www.youtube.com/watch?v=8X5PWa7A6pY#t=21m50s

chrisdecker1201 commented 1 year ago

We need this feature, too 😄.

Are there any plans to implement this? Maybe I can try to solve this?

meretp commented 1 year ago

There are no plans to implement the feature AFAIK, so if you want to have a try, very welcome!

nodet commented 4 months ago

There exists https://pypi.org/project/sbommerge/. Could this be a solution?