trustification / trustify

Apache License 2.0
8 stars 15 forks source link

feat: more efficient detection of advisory formats #361

Closed jcrossley3 closed 1 month ago

jcrossley3 commented 1 month ago

Fixes #257

We only parse the documents enough to detect the fields identifying the format. We no longer parse a doc just to determine its format, so errors due to invalid data will be tossed downstream.

ctron commented 1 month ago

jsn looks cool!

bobmcwhirter commented 1 month ago

I guess... discover what versions the auto-detect can detect (maybe we need more detection for CycloneDX 1.3 vs 1.4 for instance) and then wordsmith up something.

bobmcwhirter commented 1 month ago

No I'm certain it's only a subset currently. But we should do all. And detect versions appropriately if required.