Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added Blog post for SBOM and added SBOM as plugin to documentation #3

Merged
merged 2 commits into from
Apr 4, 2024

Conversation

bechbd
Copy link
Collaborator

@bechbd bechbd commented Apr 4, 2024

No description provided.

MATCH p=(l:License)<-[:LICENSED_BY]-(:Component)<-[:DEPENDS_ON]-(:Document)
-[:DEPENDS_ON]->(:Component)-[:LICENSED_BY]->(l2)
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
RETURN DISTINCT [l2.name](http://l2.name/)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
RETURN DISTINCT [l2.name](http://l2.name/)
RETURN DISTINCT l2.name

```
MATCH p=(l:License)<-[:LICENSED_BY]-(:Component)<-[:DEPENDS_ON]-(:Document)
-[:DEPENDS_ON]->(:Component)-[:LICENSED_BY]->(l2)
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks like a formatter had some kind of conniption

Suggested change
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
WHERE l.name= 'lgpl-2.1-or-later' and l<>l2

```
MATCH p=(l:License)←[:LICENSED_BY]-(:Component)←[:DEPENDS_ON]-(:Document)
-[:DEPENDS_ON]→(:Component)-[:LICENSED_BY]→(l2)
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
WHERE l.name = 'lgpl-2.1-or-later' and l<>l2

MATCH p=(l:License)←[:LICENSED_BY]-(:Component)←[:DEPENDS_ON]-(:Document)
-[:DEPENDS_ON]→(:Component)-[:LICENSED_BY]→(l2)
WHERE [l.name](http://l.name/) = 'lgpl-2.1-or-later' and l<>l2
RETURN DISTINCT [l2.name](http://l2.name/)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
RETURN DISTINCT [l2.name](http://l2.name/)
RETURN DISTINCT l2.name


Now that we have setup our database and analysis environment we next need to install the Nodestream plugins for Neptune and SBOM.

`pip install -q pyyaml nodestream-plugin-neptune nodestream_plugin_sbom`
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
`pip install -q pyyaml nodestream-plugin-neptune nodestream_plugin_sbom`
`pip install -q pyyaml nodestream-plugin-neptune nodestream-plugin-sbom`

I think the python package is underscores but the pypi package is hyphens

@zprobst zprobst merged commit eb70299 into main Apr 4, 2024
@zprobst zprobst deleted the sbom branch April 4, 2024 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants