git.stella-ops.org/docs/features/unchecked/cli/sbom-format-conversion-cli.md

SBOM Format Conversion CLI

Module

Cli

Status

IMPLEMENTED

Description

CLI command stella sbom convert to convert between SPDX and CycloneDX SBOM formats with deterministic output, plus stella sbom export --type cbom for Cryptographic BOM export.

Implementation Details

• Command Group: src/Cli/StellaOps.Cli/Commands/SbomCommandGroup.cs -- SBOM conversion commands
• Commands:
  • stella sbom convert <file> --to cdx|spdx -- convert SBOM format. Options: --output <path>
  • stella sbom export --type cbom -- export Cryptographic BOM

E2E Test Plan

• Run stella sbom convert ./sbom.spdx.json --to cdx and verify CycloneDX output
• Run stella sbom convert ./sbom.cdx.json --to spdx and verify SPDX output
• Verify deterministic conversion (same input produces identical output)
• Run stella sbom export --type cbom and verify CBOM export
• Verify component data preserved during conversion