spdx

package

v0.3.6 Latest Latest Go to latest Published: Oct 21, 2025 License: Apache-2.0 Imports: 17 Imported by: 1

Details

Package spdx extracts software dependencies from an SPDX SBOM.

View Source

const (
	// Name is the unique name of this extractor.
	Name = "sbom/spdx"
)

This section is empty.

func New() filesystem.Extractor

New returns a new instance of the extractor.

type Extractor struct{}

Extractor extracts software dependencies from an spdx SBOM.

func (e Extractor) Extract(ctx context.Context, input *filesystem.ScanInput) (inventory.Inventory, error)

Extract parses the SPDX SBOM and returns a list purls from the SBOM.

func (e Extractor) FileRequired(api filesystem.FileAPI) bool

FileRequired returns true if the specified file is a supported spdx file.

func (e Extractor) Name() string

Name of the extractor.

func (e Extractor) Requirements() *plugin.Capabilities

Requirements of the extractor.

func (e Extractor) Version() int

Version of the extractor.

Path	Synopsis
metadata Package metadata defines a Metadata struct for SPDX packages.	Package metadata defines a Metadata struct for SPDX packages.
purl Package purl extracts the PURL from an SPDX package.	Package purl extracts the PURL from an SPDX package.