sbom-tool icon indicating copy to clipboard operation
sbom-tool copied to clipboard
verified publisher icon microsoft

sbom Validate

Open AliceShi789654 opened this issue 3 years ago • 1 comments

  1. run command: .\sbom-tool-win-x64.exe generate -b $filepath -bc $codepath -pn alicedemo -pv 1.0.0 -ps Alice -nsb https://alicedemo.com -m $manifestpath

  2. To generate the file: $manifestpath_manifest\spdx_2.2\manifest.spdx.json

  3. run validate command: .\sbom-tool-win-x64.exe Validate -b $filepath -o $outputpath -m $manifestpath -mi alicedemo:1.0.0

Error: Encountered error while running ManifestTool validation workflow. Error: The given key 'alicedemo:1.0.0' was not present in the dictionary.

How to fix it?

AliceShi789654 avatar Sep 22 '22 09:09 AliceShi789654

The 'validate' scenario is currently not supported. This tool only generates SBOMs. We are working on a validate solution right now and we should have it ready in a couple of weeks.

aasim avatar Sep 27 '22 17:09 aasim

Validation is supported now. You can use -mi SPDX:2.2 to validate your SBOM.

sebasgomez238 avatar Apr 20 '23 17:04 sebasgomez238