sbom-tools 0.2.0

Semantic SBOM diff and analysis tool
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

//! CLI handler for the `tailor` command.
//!
//! Filters an SBOM by removing components that don't match criteria.

use std::path::{Path, PathBuf};

use anyhow::Result;

use crate::parsers::parse_sbom_str;
use crate::pipeline::{exit_codes, read_input};
use crate::serialization::{TailorConfig, tailor_sbom_json};

/// Run the tailor command.
pub fn run_tailor(
    file: &Path,
    output_file: Option<&PathBuf>,
    config: TailorConfig,
    quiet: bool,
) -> Result<i32> {
    // Shared '-'-aware input path (same as view/validate): supports piping an
    // SBOM via stdin and gives contextful errors instead of a raw ENOENT.
    let raw_json = read_input(file)?;
    let sbom = parse_sbom_str(&raw_json)?;
    let tailored = tailor_sbom_json(&raw_json, &sbom, &config)?;

    match output_file {
        Some(path) => {
            std::fs::write(path, &tailored)?;
            if !quiet {
                eprintln!("Tailored SBOM written to {}", path.display());
            }
        }
        None => {
            println!("{tailored}");
        }
    }

    Ok(exit_codes::SUCCESS)
}