New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add CycloneDX support #4

Open

ivanayov opened this issue Mar 23, 2023 · 0 comments

Collaborator

ivanayov commented Mar 23, 2023

This might follow 2 different approaches:

Option 1: Use converter tool like cdx2spdx and stick to spud parser only

Pros:
- It's simple to add and easier to support
Cons:
- Possible data loss during conversion
- Composed file is restricted to SPDX

Option2: Add CDX parser and do the conversion at out side

Pros:
- This allows up to output both formats
Cons:
- Complicates support over time
- Requires implementing conversion logic which already exists in another tools

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment