Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Export specific format versions (SPDX) #1519

Closed
kzantow opened this issue Jan 25, 2023 · 0 comments · Fixed by #1543
Closed

Export specific format versions (SPDX) #1519

kzantow opened this issue Jan 25, 2023 · 0 comments · Fixed by #1543
Assignees
Labels
enhancement New feature or request

Comments

@kzantow
Copy link
Contributor

kzantow commented Jan 25, 2023

What would you like to be added:
Ability to export formats at a specific version, for example SPDX version 2.2.

Why is this needed:
Improve interoperability with other tools.

Additional context:
The leading thought is that this will be an extension of the format string, with an @<version-matcher> at the end, so you could run:

syft <something> -o spdx-json@2.2

which would output an SPDX 2.2 document version, or:

syft <something> -o spdx-tag-value@2

which would output the latest SPDX v2 document type (in this case would be 2.3).

Also: we will probably only be able to implement this for SPDX at the moment, since the spdx/tools-golang library now has support for conversions between different versions but other libraries do not (including Syft JSON itself!).

@kzantow kzantow added the enhancement New feature or request label Jan 25, 2023
@kzantow kzantow self-assigned this Jan 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant