Files
git.stella-ops.org/docs/features/checked/cli/sbom-format-conversion-cli.md
2026-02-14 09:11:48 +02:00

1.5 KiB

SBOM Format Conversion CLI

Module

Cli

Status

VERIFIED

Description

CLI command stella sbom convert to convert between SPDX and CycloneDX SBOM formats with deterministic output, plus stella sbom export --type cbom for Cryptographic BOM export.

Implementation Details

  • Command Group: src/Cli/StellaOps.Cli/Commands/SbomCommandGroup.cs -- SBOM conversion commands
  • Commands:
    • stella sbom convert <file> --to cdx|spdx -- convert SBOM format. Options: --output <path>
    • stella sbom export --type cbom -- export Cryptographic BOM

E2E Test Plan

  • Run stella sbom convert ./sbom.spdx.json --to cdx and verify CycloneDX output
  • Run stella sbom convert ./sbom.cdx.json --to spdx and verify SPDX output
  • Verify deterministic conversion (same input produces identical output)
  • Run stella sbom export --type cbom and verify CBOM export
  • Verify component data preserved during conversion

Verification

  • Verified: 2026-02-13T15:30:00Z
  • Tier 0 (Source): pass -- all referenced source files exist on disk
  • Tier 1 (Build): pass -- module builds cleanly, 238 tests pass in StellaOps.Cli.Formatting.Tests
  • Tier 2d (Integration): pass -- targeted integration tests confirm behavioral correctness
  • Test Project: src/Cli/__Tests/StellaOps.Cli.Formatting.Tests/StellaOps.Cli.Formatting.Tests.csproj
  • Evidence: docs/qa/feature-checks/runs/cli/sbom-format-conversion-cli/run-001/tier2-integration-check.json