MCPcopy Create free account
hub / github.com/XmirrorSecurity/OpenSCA-cli / AddPackage

Method AddPackage

opensca/model/spdx.go:57–71  ·  view source on GitHub ↗
(id, vendor, name, version string, language Language, lics []string)

Source from the content-addressed store, hash-verified

55}
56
57func (doc *SpdxDocument) AddPackage(id, vendor, name, version string, language Language, lics []string) {
58 purlRef := ExternalRef{
59 ReferenceCategory: "PACKAGE-MANAGER",
60 ReferenceType: "purl",
61 ReferenceLocator: Purl(vendor, name, version, language),
62 }
63 doc.Packages = append(doc.Packages, SpdxPackage{
64 SPDXID: "SPDXRef-" + id,
65 Name: assert(name),
66 Version: assert(version),
67 Supplier: assert("Organization: " + vendor),
68 LicenseConcluded: assert(strings.Join(lics, " OR ")),
69 ExternalRefs: []ExternalRef{purlRef},
70 })
71}
72
73func (doc *SpdxDocument) AddRelation(parentId, childId string) {
74 doc.Relationships = append(doc.Relationships, Relationship{

Callers 1

spdxDocFunction · 0.95

Calls 2

PurlFunction · 0.85
assertFunction · 0.85

Tested by

no test coverage detected