Documentation
¶
Overview ¶
Package sbom provides format-agnostic helpers for reading SBOM files produced by the cdx16 and spdx30 sub-packages.
Index ¶
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
func ReadDirectDeps ¶
ReadDirectDeps sniffs the SBOM format from the JSON payload and returns the deduped, sorted analysis-identifier keys for direct (depth=1) dependencies.
Types ¶
type DirectDep ¶
type DirectDep struct {
Key string
Location *models.LocationInfo
}
DirectDep pairs an analysis-identifier key with optional manifest-source provenance. Location is nil when the SBOM did not record it.
func ReadDirectDepsWithLocations ¶
ReadDirectDepsWithLocations is the same as ReadDirectDeps but also returns each direct dep's manifest-file provenance when the SBOM carries it.
Source Files
Directories
Click to show internal directories.
Click to hide internal directories.