bom icon indicating copy to clipboard operation
bom copied to clipboard

Add compose functionality

Open ivanayov opened this issue 3 years ago • 0 comments

What would you like to be added:

What do you think about adding a feature

bom compose 

for merging multiple SBOMs into a top level artefact?

A PoC already exists in sbom-composer, but as bom already supports wider range of functionalities, it would be great to have such option in order to work as all-in-one solution

Why is this needed:

Having granular SBOMs is not a new concept and it's inevitable to end-up operating with tens or hundreds of documents for many use-cases. By now this is only resolved by using External Document References, but it's much harder to work with linked documents, rather than a single composed one. Having the compose option would increase the usefulness of the bom tool, resolving this problem.

Bom already has parsing and filtering features to build compose on top of.

ivanayov avatar Sep 20 '22 11:09 ivanayov