How to read in a BOM document?

[rolweber]

Hello Team,

I need to add more info to a BOM, which I'm planning to generate with cyclonedx-bom. My idea was to use cyclonedx-python-lib to read in the generated BOM, then merge the additional info my team requires, then write out the enriched BOM. Looks like this idea is already failing at the "read in" step.

The documentation says that Parsers were moved to cyclonedx-bom. The parsers there are for foreign formats like conda output or pip requirements files, which makes perfect sense to me. But what I need is a parser which just reads back the format(s) generated by cyclonedx-python-lib itself. That would fit better right here, for example to do round-trip tests: serialize, deserialize, check if everything's still there.

It seems this kind of parser is neither here nor there. I see an output package, but no corresponding input. The parser package has just an abstract base class. The tests generate data programmatically, afaict. Did I miss something? Or is my use case that far off?

cyclonedx-bom supports only json and xml as output formats, so deserializing protocol buffers doesn't seem to be an option for my idea. Besides, I haven't seen a way to deserialize protocol buffers into the objects of this lib either.

[jkowalleck]

duplicates #185

[jkowalleck]

thanks for your questions, @rolweber .

the short answer: please see #185 ff

the needed features are planned for https://github.com/CycloneDX/cyclonedx-python-lib/milestone/4

[rolweber]

Thanks. Sorry for missing the existing issue.