-
Notifications
You must be signed in to change notification settings - Fork 11
Description
I have a Main Component and another which is a part from the main one. App B ∈ App A. Both of them have dependencies in Common. No matter which kind of merge I apply to merge SBOMs of both components, I don't get the hierarchical Structure where App A mention that App B is one of its components
Yes, that's an important feature to present the hierarchiecal structure and komplexity of an application. I tried the hierarchiecal, the flat, the assembly merge. However it seems that the hierarchiecalmerge completly ignores the hierarchiecal structure of components and mention every component separetly, which doesn't really present the hierarchiecal structure of the app. The flatmerge does however show this hierarchiecal structure. However, it dupplicates the same subcomponent with different bom-refs. One bom-ref which is in the original sbom before the merge, another one generated from interlynk tool itself. This makes it a little hard to see through the merged sbom. The same goes for the Assemblymerge with a little different presentation of the components. Thanks for making the issue.