Feature Request: read SBOM from stdin
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
Research direction
Start by locating the CLI functions that accept SBOM file input and the Verify command shown in the example. Done means passing a single '-' causes the SBOM to be read from standard input, including the documented container-piping use case.
Written by the indexing model from the issue text.
Description
It would be great if the CLI functions which read SBOMs support reading from piped standard input.
There are some cases where it is much more convenient to pipe output of one tool into another one instead of requiring files. For example: using the tools to validate a SBOM in a container requires: saving the SBOM to a file, run the container with a mounted filesystem containing the SBOM, referencing the same SBOM using a path matching how the container mount was specified, etc. whereas doing something like cat <sbom> | docker run --rm -i spdx-java-tools-validator:latest could be much simpler and could prevent needing an intermediary file altogether in certain circumstances.
A suggestion: one reasonably simple way to do this is just check the file input being just a single dash, - (like implemented in vim: vi -), which causes the system to explicitly read from stdin instead of attempting to load a file. This would allow something like the aforementioned cat <sbom> | docker run --rm -i spdx-java-tools-validator:latest Verify - to work for the example.
- Dominant language
- Java
- Stars
- 101
- Forks
- 46
- Avg merge
- 9h 43m
- Merged PRs (30d)
- 8
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from spdx/tools-java
-
bug spdx-2.3 validation
Difficulty 4/5 3-5 days Newbie friendliness 55/100
spdx/tools-java#316 · 1 comment · 1 reaction ·
-
Release 2.0.8 Open
Difficulty 4/5 3-5 days Newbie friendliness 20/100
spdx/tools-java#313 · 1 reaction ·
-
spdx-2.x spdx-3.x
Difficulty 3/5 1-2 days Newbie friendliness 58/100
spdx/tools-java#290 · 2 comments ·
-
validation
Difficulty 3/5 1-2 days Newbie friendliness 48/100
spdx/tools-java#287 · 1 comment · 1 reaction ·
-
question test
Difficulty 3/5 1-2 days Newbie friendliness 48/100
spdx/tools-java#283 · 14 comments · 1 reaction ·
Similar issues
-
bug
Difficulty 2/5 1-3 hours Newbie friendliness 85/100
-
Two open-case totals on one screen: the Programs tile says 15,858 and the nav badge says 15,868 Openbug frontend maui-pilot
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
objectionary/eo-graphs#74 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
-
Difficulty 2/5 1-3 hours Newbie friendliness 65/100