Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refactor: split evaluations into SBOM or License for given user input #5

Merged
merged 3 commits into from
Dec 6, 2023

Conversation

spiffcs
Copy link
Collaborator

@spiffcs spiffcs commented Dec 4, 2023

Summary

The main change for this PR surrounds the reporting structure and how grant parses user requests.

  • Grant generates a Report which is a summary of all user requests. A user's requests can constitute any of the following:
    • a path to an SBOM file
    • a path to a license
    • a path to an archive
    • a path to a directory (with any of the above)
    • or some container image

Example grant command showing the different inputs

  • grant check gpl (Single License)
  • grant check alpine:latest (Single Image)
  • grant check ubuntu.spdx.json (Single SBOM)
  • grant check ./contents (Folder where grant will check each item to run an eval against)
  • grant check alpine:latest, ubuntu.spdx.json (Multiple source: image and sbom)
  • syft -o json ubuntu:latest | grant check MIT, alpine:latest, wolfi.spdx.json, ./contents (Everything all at once)

Signed-off-by: Christopher Phillips <[email protected]>
Signed-off-by: Christopher Phillips <[email protected]>
@spiffcs spiffcs marked this pull request as ready for review December 6, 2023 19:47
@spiffcs spiffcs merged commit 102131d into main Dec 6, 2023
2 checks passed
@spiffcs spiffcs deleted the check-presenter branch December 6, 2023 19:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant