Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Capture dependencies when parsing SPDX SBOMs #2869

Merged
merged 1 commit into from
May 14, 2024

Conversation

russellhaering
Copy link
Contributor

When parsing SPDX SBOMs, translate DEPENDS_ON and DEPENDENCY_OF relationships into a dependency-of relationship in the Syft model.

When parsing SPDX SBOMs, translate DEPENDS_ON and DEPENDENCY_OF relationships
into a dependency-of relationship in the Syft model.

Signed-off-by: Russell Haering <russellhaering@gmail.com>
Copy link
Contributor

@kzantow kzantow left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @russellhaering -- this looks good to me 👍

@kzantow kzantow merged commit e767bcf into anchore:main May 14, 2024
11 checks passed
@wagoodman wagoodman added the enhancement New feature or request label May 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants