The spdx-sbom-generator tool helps generating SBOM information complying with the SPDX standard and relies heavily on the parsers project. The summer of code was spent improving both these projects and the improvements can be therefore classified among the two as follows:
- The GitHub actions pipeline to run tests for various language ecosystems was failing. This needed setting up of different environments and installing dependencies for some, in the pipeline itself to be able to run tests. opensbom-generator/parsers#60 fixed this.
- The poetry parser lacked a dummy project(
testdata
) to be tested against for sanity. opensbom-generator/parsers#62 introduced a simple fastapi project with lockfiles. - Following the above change, unit tests were added with opensbom-generator/parsers#63 and also these unit tests were integrated in the GitHub actions workflow using https://github.com/opensbom-generator/parsers/pull