sbom

package

v0.1.18-rc2 Latest Latest Go to latest Published: Jul 22, 2026 License: MIT Imports: 11 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type Package struct {
	Name    string
	Version string
}

Package is one normalized package/version pair parsed from an SBOM document.

func ExtractPackagesFromJSON(raw []byte) ([]Package, error)

ExtractPackagesFromJSON parses one supported SBOM JSON document and returns normalized package/version pairs without attaching producer provenance.

type Row struct {
	JobID  types.JobID
	RepoID types.RepoID
	Lib    string
	Ver    string
}

Row is one normalized SBOM package row bound to producer identity.

func ExtractRowsFromBundle(bundle []byte, jobID types.JobID, repoID types.RepoID) ([]Row, error)

ExtractRowsFromBundle parses supported SBOM files from a gzipped tar bundle and returns normalized rows keyed to the provided job/repo provenance.

func ExtractRowsFromJSON(raw []byte, jobID types.JobID, repoID types.RepoID) ([]Row, error)

ExtractRowsFromJSON parses one supported SBOM JSON document and returns normalized rows keyed to the provided job/repo provenance.