sbom-tools 0.2.0

Semantic SBOM diff and analysis tool
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! CLI handler for the `merge` command.
//!
//! Merges two SBOMs into one, deduplicating components.

use std::path::{Path, PathBuf};

use anyhow::Result;

use crate::pipeline::{exit_codes, read_input};
use crate::serialization::{MergeConfig, merge_sbom_json};

/// Run the merge command.
pub fn run_merge(
    primary: &Path,
    secondary: &Path,
    output_file: Option<&PathBuf>,
    config: MergeConfig,
    quiet: bool,
) -> Result<i32> {
    // Shared '-'-aware input path (same as view/validate): either input may
    // be piped via stdin (only one of the two can actually be '-').
    let primary_json = read_input(primary)?;
    let secondary_json = read_input(secondary)?;
    let merged = merge_sbom_json(&primary_json, &secondary_json, &config)?;

    match output_file {
        Some(path) => {
            std::fs::write(path, &merged)?;
            if !quiet {
                eprintln!("Merged SBOM written to {}", path.display());
            }
        }
        None => {
            println!("{merged}");
        }
    }

    Ok(exit_codes::SUCCESS)
}