Comments (3)
That is actually a very good fit, yes. These tests would be a great place to also verify validity of generated SBOMs, where applicable.
@italvi Upon closer thought, I don't think its adds any value after all. The tests run the commands on a known input and compare the result to a known output. Since the expected result is predetermined and the test can only succeed if the output matches exactly what is expected, additional validation would be pointless. The validation result would be the same as if we ran the validation directly on the expected output.
from cyclonedx-editor-validator.
from cyclonedx-editor-validator.
That is actually a very good fit, yes. These tests would be a great place to also verify validity of generated SBOMs, where applicable.
from cyclonedx-editor-validator.
Related Issues (20)
- `build-public` messes up compositions
- `merge-vex` reference check doesn't take nested components into account
- What is the point of `merge-vex`? HOT 4
- Should `amend` set `compositions` to `unknown` rather than `incomplete`? HOT 3
- feat: add support for cdx 1.6
- Missing attribution for license data HOT 3
- Amend throws error on Windows using licenses from Conan project HOT 7
- Add 'add_to_dependencies' option for merge command HOT 1
- Ad further options for the modification of a sbom HOT 1
- refactor: change documentation creation from mkdocs to sphinx
- Automatically update copyright year
- fix: allow only license in custom schema
- Should validate silently overwrite `issues.json`? HOT 1
- fix: add copyright information to files
- Custom validation applies components requirements to tools HOT 2
- Should `build-public` delete `licensing`? HOT 4
- Build public does not delete metadata.component even if its tagged internal
- Should `build-public` delete nested components? HOT 1
- Adapt Build Public to Throw a Warning when Metadata.Component is internal?
- Should we create a schema for suppliers?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from cyclonedx-editor-validator.