spdx22

README

Source

The contents of this directory is largely based on anchore/syft's spdxjson package. The version copied is from the (current) latest release of Syft, v0.65.0, which currently supports SPDX 2.3. This choice was made so that we can leverage as much as the common Syft helper functionality (such as spdxhelpers) as possible.

Modifications to the code have been made to the code, and to the code in the model directory to include subtle differences that apply to SPDX 2.2. These changes were largely based on v0.60.3.

The implementations of decoder and validator have been omitted for simplicity, since they are not required for buildpacks' SBOM generation.

Documentation

Index

• Constants
• func Format() sbom.Format
• func ToFormatModel(s sbom.SBOM) *spdx.Document

Constants

const ID sbom.FormatID = "spdx-2-json"

Functions

func Format

func Format() sbom.Format

func ToFormatModel

func ToFormatModel(s sbom.SBOM) *spdx.Document

ToFormatModel transforms the sbom import a format-specific model. note: this is needed for anchore import functionality TODO: unexport this when/if anchore import functionality is removed