Skip to content

Add new merge algorithm to add SBOM as a component. #160

@riteshnoronha

Description

@riteshnoronha

I have a Main Component and another which is a part from the main one. App B ∈ App A. Both of them have dependencies in Common. No matter which kind of merge I apply to merge SBOMs of both components, I don't get the hierarchical Structure where App A mention that App B is one of its components

Yes, that's an important feature to present the hierarchiecal structure and komplexity of an application. I tried the hierarchiecal, the flat, the assembly merge. However it seems that the hierarchiecalmerge completly ignores the hierarchiecal structure of components and mention every component separetly, which doesn't really present the hierarchiecal structure of the app. The flatmerge does however show this hierarchiecal structure. However, it dupplicates the same subcomponent with different bom-refs. One bom-ref which is in the original sbom before the merge, another one generated from interlynk tool itself. This makes it a little hard to see through the merged sbom. The same goes for the Assemblymerge with a little different presentation of the components. Thanks for making the issue.

Metadata

Metadata

Labels

No labels
No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions