Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Write a conversion layer to help transfer SBOM between SPECS #51

Open
riteshnoronha opened this issue Feb 14, 2025 · 0 comments

Comments

@riteshnoronha
Copy link
Contributor

Each input & output adapters should know the limitations of the system they are interfacing with. The conversion layer will serve as an adapter to help move sboms from one system to another. Conversion lose data between spec conversions, we should always warn user when this happens.

Use Case:

  • User would like to transfer github api generated sboms to DT, github api only generates sboms in SPDX, while DT supports cyclonedx.
  • User would like to transfer Cyclonedx 1.6 sboms to a system that does not supports only Cyclonedx 1.4, we should be able to downgrade the version and push it.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant