sbomdiff
sbomdiff copied to clipboard
This tool compares two Software Bill of Materials (SBOMs) and reports the differences.
**Problem statement:** ------------------------ Showing same software b/w two SPDX file as diff and generating result with same product removed then later added back. **If spdx file [1] contains:** ``` ####...
Add additional checks to identify when a file component is updated by checking for a checksum value change.
This PR adds the possibility to create a docker image from it... ideally a github workflow to automatically release it should be added, please let me know if you want...
If multiple versions of a component are included, the comparison is based on the order of the components. This can result in reported differences even if the same versions of...