@@ -98,22 +98,27 @@ TODO: all command examples
98
98
99
99
``` bash
100
100
101
- sbom-tool generate -b ./dist -bc ./ -pn transmute -ps transmute.industries -pv ` jq -r .version package.json` -nsu ` git rev-parse --verify HEAD`
101
+ sbom-tool generate -b ./dist -bc ./ -pn transmute -ps transmute.industries \
102
+ -pv ` jq -r .version package.json` -nsu ` git rev-parse --verify HEAD`
102
103
103
- transmute scitt issue-statement ./tests/fixtures/private.notary.key.cbor ./dist/_manifest/spdx_2.2/manifest.spdx.json \
104
+ transmute scitt issue-statement ./tests/fixtures/private.notary.key.cbor \
105
+ ./dist/_manifest/spdx_2.2/manifest.spdx.json \
104
106
--iss https://software.vendor.example \
105
107
--sub ` jq -r .documentNamespace ./dist/_manifest/spdx_2.2/manifest.spdx.json` \
106
108
--content-type application/spdx+json \
107
- --location https://github.com/transmute-industries/transmute/blob/main /dist/_manifest/spdx_2.2/manifest.spdx.json \
109
+ --location https://github.com/... /dist/_manifest/spdx_2.2/manifest.spdx.json \
108
110
--output ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor
109
111
110
- transmute scitt issue-receipt ./tests/fixtures/private.notary.key.cbor ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor \
112
+ transmute scitt issue-receipt ./tests/fixtures/private.notary.key.cbor \
113
+ ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor \
111
114
--iss https://software.notary.example \
112
115
--sub ` jq -r .documentNamespace ./dist/_manifest/spdx_2.2/manifest.spdx.json` \
113
116
--log ./tests/fixtures/trans.json \
114
117
--output ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor
115
118
116
- transmute scitt verify-receipt-hash ./tests/fixtures/public.notary.key.cbor ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor ` cat ./dist/_manifest/spdx_2.2/manifest.spdx.json.sha256`
119
+ transmute scitt verify-receipt-hash ./tests/fixtures/public.notary.key.cbor \
120
+ ./dist/_manifest/spdx_2.2/manifest.spdx.scitt.cbor \
121
+ ` cat ./dist/_manifest/spdx_2.2/manifest.spdx.json.sha256`
117
122
118
123
```
119
124
@@ -142,11 +147,11 @@ jobs:
142
147
--push
143
148
` ` `
144
149
145
- <img src="./docs/receipt.png.png " alt="graph query results" />
150
+ <img src="./docs/receipt.png" alt="graph query results" />
146
151
147
152
` ` `
148
153
MATCH (statement {
149
- subject : ' https://spdx.org/spdxdocs/ sbom-tool-2.2.7-66a07f86-0f12-4c6f-887b-9a1510b11d8a/transmute /0.9.2/2e57d4b2d9b45cccdd74dad91edbaabaa06074f9'
154
+ subject : ' https://spdx.org/... sbom-tool-2.2.7... /0.9.2/2e57d4b2d9b45cccdd74dad91edbaabaa06074f9'
150
155
})
151
156
MATCH (receipt {
152
157
subject : statement.subject
0 commit comments