Skip to content

feat: SPDX 3 #247

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
kzantow merged 30 commits into from
Jan 9, 2026
Merged

feat: SPDX 3 #247

Show file tree
Hide file tree
Changes from 7 commits
Commits
Show all changes
30 commits
Select commit Hold shift + click to select a range
8e9125f
feat: prototype 3.0 model
kzantow Aug 2, 2024
b92b27a
chore: support external references
kzantow Aug 4, 2024
08c976d
chore: bad CPE example
kzantow Aug 6, 2024
49d029d
chore: update to new prototype model
kzantow Jan 28, 2025
23c3aaf
Merge remote-tracking branch 'upstream/main' into feat/spdx-3-prototype
kzantow Jan 28, 2025
a45af1e
chore: update go version to 1.23
kzantow Jan 29, 2025
8533d40
chore: update model and examples
kzantow Feb 4, 2025
53e1f17
feat: mostly functional SPDX 3 model with validation
kzantow Mar 10, 2025
a9d84dc
chore: functional converter with spdx 3
kzantow Mar 12, 2025
56f2c82
chore: add Cast function
kzantow Aug 6, 2025
1dbe8fe
chore: upgrade go-struct-converter
kzantow Aug 6, 2025
e693934
chore: prototype convert function
kzantow Aug 6, 2025
4a052c2
Merge remote-tracking branch 'upstream/main' into feat/spdx-3-prototype
kzantow Aug 6, 2025
af194a5
Merge remote-tracking branch 'upstream/main' into feat/spdx-3-prototype
kzantow Sep 8, 2025
75e046c
feat(wip): struct-based v3 serializations
kzantow Oct 8, 2025
293fbfb
chore: update cpe
kzantow Oct 8, 2025
5a408ad
chore: erroneous commit
kzantow Oct 8, 2025
7df12e9
feat: flat struct generation, update tests
kzantow Oct 8, 2025
20112fc
chore: update tests
kzantow Oct 8, 2025
084656c
chore: adjust coverage filtering
kzantow Oct 8, 2025
162bb87
chore: minor updates
kzantow Oct 8, 2025
4a11143
chore: bump go-ld
kzantow Oct 9, 2025
77304a6
chore: cleanup test logging, misc fixes
kzantow Oct 9, 2025
22d11c1
chore: move json ld library to internal package
kzantow Oct 13, 2025
98fd460
Merge remote-tracking branch 'upstream/main' into feat/spdx-3-prototype
kzantow Nov 24, 2025
b2132d1
fix: NamespaceMap handling, improved ID generation
kzantow Jan 8, 2026
98239c9
Merge remote-tracking branch 'upstream/main' into feat/spdx-3-prototype
kzantow Jan 9, 2026
08e19c2
chore: update go version
kzantow Jan 9, 2026
747e806
chore: update go version
kzantow Jan 9, 2026
52a356e
fix: sort model properties, correct generator comment
kzantow Jan 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ jobs:
- uses: actions/checkout@v4
- uses: actions/setup-go@v5
with:
go-version: '1.18'
go-version: '1.23'
- name: Run tests
run: make test
- name: Send coverage report to coveralls
Expand Down
3 changes: 2 additions & 1 deletion Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,8 @@ format:

.PHONY: unit
unit:
go test -v -covermode=count -coverprofile=profile.cov ./...
go test -v -covermode=count -coverprofile=profile.cov.tmp ./...
cat profile.cov.tmp | grep -v /model.go > profile.cov # ignore generated model file

.PHONY: fuzz
fuzz:
Expand Down
12 changes: 9 additions & 3 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,11 +1,17 @@
module github.com/spdx/tools-golang

go 1.13
go 1.23.0

require (
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092
github.com/anchore/go-struct-converter v0.0.0-20240925125616-a0883641c664
github.com/google/go-cmp v0.6.0
github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb
github.com/spdx/gordf v0.0.0-20250128162952-000978ccd6fb
github.com/stretchr/testify v1.10.0
sigs.k8s.io/yaml v1.4.0
)

require (
github.com/davecgh/go-spew v1.1.1 // indirect
github.com/pmezard/go-difflib v1.0.0 // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)
17 changes: 4 additions & 13 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,27 +1,18 @@
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092 h1:aM1rlcoLz8y5B2r4tTLMiVTrMtpfY0O8EScKJxaSaEc=
github.com/anchore/go-struct-converter v0.0.0-20221118182256-c68fdcfa2092/go.mod h1:rYqSE9HbjzpHTI74vwPvae4ZVYZd1lue2ta6xHPdblA=
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/anchore/go-struct-converter v0.0.0-20240925125616-a0883641c664 h1:TcUCZsLGIXJbqo9z9VX436XdpIyZ5Cs3b8XTIp+jRxs=
github.com/anchore/go-struct-converter v0.0.0-20240925125616-a0883641c664/go.mod h1:rYqSE9HbjzpHTI74vwPvae4ZVYZd1lue2ta6xHPdblA=
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
github.com/google/go-cmp v0.5.9/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb h1:bLo8hvc8XFm9J47r690TUKBzcjSWdJDxmjXJZ+/f92U=
github.com/spdx/gordf v0.0.0-20201111095634-7098f93598fb/go.mod h1:uKWaldnbMnjsSAXRurWqqrdyZen1R7kxl8TkmWk2OyM=
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA=
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
github.com/spdx/gordf v0.0.0-20250128162952-000978ccd6fb h1:7G2Czq97VORM5xNRrD8tSQdhoXPRs8s+Otlc7st9TS0=
github.com/spdx/gordf v0.0.0-20250128162952-000978ccd6fb/go.mod h1:uKWaldnbMnjsSAXRurWqqrdyZen1R7kxl8TkmWk2OyM=
github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA=
github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM=
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E=
Expand Down
Loading
Loading