affidavit 26.6.22

Provenance Layer — receipt assembly and certification (verify a witness against a format standard; never decide honesty).
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

// Copyright (c) 2024 Sean Chatman
// SPDX-License-Identifier: MIT OR Apache-2.0
//
// Thin verb wrapper. The pack is authoritative for the CLI *interface* only;
// the body delegates to a stable consumer-implemented handler.

//! `receipt sbom-scan` verb.

use clap_noun_verb::Result;
use clap_noun_verb_macros::verb;

/// Correlate vulnerabilities/VEX against SBOM components and propagate risk
#[verb("sbom-scan", "receipt")]
pub fn sbom_scan(
    sbom_path: String,
    advisories_path: Option<String>,
    format: Option<String>,
) -> Result<()> {
    crate::handlers::sbom_scan(sbom_path, advisories_path, format)
}