Filter SBOM by sources or binaries

[ssnaaz]

No description provided.

[ssnaaz]

debsbom filter command:

debsbom filter -h
usage: debsbom filter [-h] [-t {cdx,spdx}] [--sources] [--binaries] BOMIN bomout

positional arguments:
  BOMIN                 sbom file(s) to process for 'bomin'. Use '-' to read from stdin
  bomout                sbom output file. Use '-' to write to stdout

options:
  -h, --help            show this help message and exit
  -t, --sbom-type {cdx,spdx}
                        SBOM type to process (default: auto-detect), required when reading from stdin
  --sources             operate only on source packages (skip binaries)
  --binaries            operate only on binary packages (skip sources)

[fmoessbauer]

Why do we import SPDX_REF_DOCUMENT here? This code location should be sbom type agnostic.

[fmoessbauer]

The commands are getting more and more. How about sorting them by alphabet?

[fmoessbauer]

Hi @ssnaaz , thanks for implementing this. The implementation already looks pretty clean. Just some minor remarks that need to be fixed before merging.

... and please add a test (both a smoke test in the GH actions as well as a unit test).

[ssnaaz]

@fmoessbauer Thank you for the feedback, I have updated the MR, please have a look.