download command

Processes a SBOM and downloads the referenced packages. If no SBOM is provided, it reads line separated entries (name version arch) from stdin to define what shall be downloaded.

usage: debsbom download [-h] [-t {cdx,spdx}] [--outdir OUTDIR] [--sources]
                        [--binaries]
                        [bomin]

Positional Arguments

bomin

sbom file to process. Use ‘-’ to read SBOM from stdin

Named Arguments

-t, --sbom-type

Possible choices: cdx, spdx

SBOM type to process (default: auto-detect)

--outdir

directory to store downloaded files

Default: 'downloads'

--sources

download source packages

Default: False

--binaries

download binary packages

Default: False