Shouldn't this be done by creating a third SBOM that refers back to the subordinate SBOMs, including all three in the result chain?
From: [email protected] <[email protected]> On Behalf Of Gary O'Neall via lists.spdx.org Sent: Monday, August 8, 2022 10:07 AM To: [email protected] Subject: [EXTERNAL] Re: [spdx] SPDX Merging #spdx I'm not aware of a tool that currently supports merging. There is an issue open on the SPDX Java tools<https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fspdx%2Ftools-java%2Fissues%2F62&data=05%7C01%7Cjoe.bussell%40microsoft.com%7Cb00aabae729d48e4c43a08da796074f8%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637955752440416619%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=AQ%2FhUL2pAxQyQeNnF%2F4mIKHjSwmuSkmDvuu%2FE4BQm%2BU%3D&reserved=0> - any java programmers out there who would like to volunteer a solution is welcome to create a pull request. Regards, Gary From: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> On Behalf Of Patil, Sandeep via lists.spdx.org Sent: Monday, August 8, 2022 4:07 AM To: [email protected]<mailto:[email protected]> Subject: [spdx] SPDX Merging #spdx Hi All, Is there any tool to merge two spdx file ? Regards Sandeep -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#1586): https://lists.spdx.org/g/spdx/message/1586 Mute This Topic: https://lists.spdx.org/mt/92889347/21656 Mute #spdx:https://lists.spdx.org/g/spdx/mutehashtag/spdx Group Owner: [email protected] Unsubscribe: https://lists.spdx.org/g/spdx/leave/2655439/21656/1698928721/xyzzy [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
