sbom

type Component ¶

type Component struct {
	ID         string
	Name       string
	Version    string
	Type       string
	PURL       string
	Source     string
	SHA256     string
	Supplier   string
	Properties map[string]string
}

Component is a normalized node shared by all adapters and renderers.

type Coverage ¶

type Coverage struct {
	Adapter string
	Status  string // complete, incomplete, unavailable
	Detail  string
}

Coverage records whether an adapter had sufficient stable evidence for the selected scope. An unavailable adapter is visible in provenance output and prevents NTIA-mode output.

type Graph ¶

type Graph struct {
	Subject       Subject
	Components    []Component
	Relationships []Relationship
	Coverage      []Coverage
}

func BuildWithOptions(ctx context.Context, config *schema.AtmosConfiguration, options Options) (*Graph, error)

type Options ¶

type Options struct {
	IncludeFiles bool
	Scope        string
	Mode         string
	Subject      Subject
}

Options controls graph construction and compliance validation.

type Relationship ¶

type Relationship struct {
	From string
	To   string
	Type string
}

type Subject ¶

type Subject struct {
	Name     string
	Version  string
	Supplier string
}

Subject identifies the software or infrastructure configuration described by a graph. NTIA output requires every field; provenance output may omit it.