Merge pull request #114 from interlynk-io/fix/unique-tools

Fix/unique tools

Author: riteshnoronha

pkg/edit/cdx.go

@@ -178,6 +178,93 @@ func cdxFindComponent(b *cydx.BOM, c *configParams) *cydx.Component {
 	return nil
 }
 
+func cdxUniqTools(a *cydx.ToolsChoice, b *cydx.ToolsChoice) *cydx.ToolsChoice {
+	choices := cydx.ToolsChoice{}
+
+	if a == nil && b == nil {
+		return &choices
+	}
+
+	if a == nil && b != nil {
+		return b
+	}
+
+	if a != nil && b == nil {
+		return a
+	}
+
+	if a.Tools != nil && b.Tools != nil {
+		choices.Tools = new([]cydx.Tool)
+		uniqTools := make(map[string]string)
+
+		for _, tool := range *a.Tools {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Tools = append(*choices.Tools, tool)
+				uniqTools[key] = key
+			}
+		}
+
+		for _, tool := range *b.Tools {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Tools = append(*choices.Tools, tool)
+				uniqTools[key] = key
+			}
+		}
+	}
+
+	if a.Components != nil && b.Components != nil {
+		choices.Components = new([]cydx.Component)
+		uniqTools := make(map[string]string)
+
+		for _, tool := range *a.Components {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Components = append(*choices.Components, tool)
+				uniqTools[key] = key
+			}
+		}
+
+		for _, tool := range *b.Components {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Components = append(*choices.Components, tool)
+				uniqTools[key] = key
+			}
+		}
+	}
+
+	if a.Services != nil && b.Services != nil {
+		choices.Services = new([]cydx.Service)
+		uniqTools := make(map[string]string)
+
+		for _, tool := range *a.Services {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Services = append(*choices.Services, tool)
+				uniqTools[key] = key
+			}
+		}
+
+		for _, tool := range *b.Services {
+			key := fmt.Sprintf("%s-%s", strings.ToLower(tool.Name), strings.ToLower(tool.Version))
+
+			if _, ok := uniqTools[key]; !ok {
+				*choices.Services = append(*choices.Services, tool)
+				uniqTools[key] = key
+			}
+		}
+	}
+
+	return &choices
+}
+
 func cdxConstructTools(b *cydx.BOM, c *configParams) *cydx.ToolsChoice {
 	choice := cydx.ToolsChoice{}
 
@@ -226,7 +313,7 @@ func cdxConstructHashes(_ *cydx.BOM, c *configParams) *[]cydx.Hash {
 	return &hashes
 }
 
-func cdxConstructLicenses(b *cydx.BOM, c *configParams) cydx.Licenses {
+func cdxConstructLicenses(_ *cydx.BOM, c *configParams) cydx.Licenses {
 	licenses := cydx.Licenses{}
 
 	for _, license := range c.licenses {

pkg/edit/cdx_edit.go

@@ -285,18 +285,7 @@ func (d *cdxEditDoc) tools() error {
 		}
 	} else if d.c.onAppend() {
 		if d.bom.Metadata.Tools != nil {
-			if d.bom.SpecVersion > cydx.SpecVersion1_4 {
-				if d.bom.Metadata.Tools.Components == nil {
-					d.bom.Metadata.Tools.Components = &[]cydx.Component{}
-				}
-
-				*d.bom.Metadata.Tools.Components = append(*d.bom.Metadata.Tools.Components, *choice.Components...)
-			} else {
-				if d.bom.Metadata.Tools.Tools == nil {
-					d.bom.Metadata.Tools.Tools = &[]cydx.Tool{}
-				}
-				*d.bom.Metadata.Tools.Tools = append(*d.bom.Metadata.Tools.Tools, *choice.Tools...)
-			}
+			d.bom.Metadata.Tools = cdxUniqTools(d.bom.Metadata.Tools, choice)
 		} else {
 			d.bom.Metadata.Tools = choice
 		}

pkg/edit/config.go

@@ -20,8 +20,6 @@ import (
 	"os"
 	"regexp"
 	"strings"
-
-	"sigs.k8s.io/release-utils/version"
 )
 
 var supportedSubjects map[string]bool = map[string]bool{
@@ -245,12 +243,6 @@ func convertToConfigParams(eParams *EditParams) (*configParams, error) {
 		})
 	}
 
-	// Always add SBOMASM to the tool list
-	p.tools = append(p.tools, paramTuple{
-		name:  "sbomasm",
-		value: version.GetVersionInfo().GitVersion,
-	})
-
 	p.copyright = eParams.CopyRight
 	p.lifecycles = eParams.Lifecycles
 	p.description = eParams.Description

pkg/edit/spdx.go

@@ -3,6 +3,7 @@ package edit
 import (
 	"context"
 	"errors"
+	"fmt"
 	"io"
 	"os"
 	"strings"
@@ -11,6 +12,7 @@ import (
 	"github.com/interlynk-io/sbomasm/pkg/logger"
 	"github.com/spdx/tools-golang/spdx"
 
+	"github.com/samber/lo"
 	spdx_json "github.com/spdx/tools-golang/json"
 	spdx_rdf "github.com/spdx/tools-golang/rdf"
 	"github.com/spdx/tools-golang/spdx/common"
@@ -204,3 +206,38 @@ func spdxConstructHashes(_ *spdx.Document, c *configParams) []spdx.Checksum {
 
 	return hashes
 }
+
+func spdxConstructTools(_ *spdx.Document, c *configParams) []spdx.Creator {
+	tools := []spdx.Creator{}
+	uniqTools := make(map[string]bool)
+
+	for _, tool := range c.tools {
+		parts := []string{tool.name, tool.value}
+		key := fmt.Sprintf("%s-%s", strings.ToLower(tool.name), strings.ToLower(tool.value))
+
+		if _, ok := uniqTools[key]; !ok {
+			tools = append(tools, spdx.Creator{
+				CreatorType: "Tool",
+				Creator:     strings.Join(lo.Compact(parts), "-"),
+			})
+
+			uniqTools[key] = true
+		}
+	}
+	return tools
+}
+
+func spdxUniqueTools(a []spdx.Creator, b []spdx.Creator) []spdx.Creator {
+	tools := a
+	uniqTools := make(map[string]bool)
+
+	for _, tool := range b {
+		key := fmt.Sprintf("%s-%s", strings.ToLower(tool.CreatorType), strings.ToLower(tool.Creator))
+
+		if _, ok := uniqTools[key]; !ok {
+			tools = append(tools, tool)
+			uniqTools[key] = true
+		}
+	}
+	return tools
+}

pkg/edit/spdx_edit.go

@@ -361,22 +361,7 @@ func (d *spdxEditDoc) tools() error {
 		return errNotSupported
 	}
 
-	tools := []spdx.Creator{}
-	uniqTools := make(map[string]bool)
-
-	for _, tool := range d.c.tools {
-		parts := []string{tool.name, tool.value}
-		key := fmt.Sprintf("%s-%s", strings.ToLower(tool.name), strings.ToLower(tool.value))
-
-		if _, ok := uniqTools[key]; !ok {
-			tools = append(tools, spdx.Creator{
-				CreatorType: "Tool",
-				Creator:     strings.Join(lo.Compact(parts), "-"),
-			})
-
-			uniqTools[key] = true
-		}
-	}
+	tools := spdxConstructTools(d.bom, d.c)
 
 	if d.c.onMissing() {
 		if d.bom.CreationInfo == nil {
@@ -396,7 +381,8 @@ func (d *spdxEditDoc) tools() error {
 		} else if d.bom.CreationInfo.Creators == nil {
 			d.bom.CreationInfo.Creators = tools
 		} else {
-			d.bom.CreationInfo.Creators = append(d.bom.CreationInfo.Creators, tools...)
+			//d.bom.CreationInfo.Creators = append(d.bom.CreationInfo.Creators, tools...)
+			d.bom.CreationInfo.Creators = spdxUniqueTools(d.bom.CreationInfo.Creators, tools)
 		}
 	} else {
 		if d.bom.CreationInfo == nil {