CycloneDX / CycloneDX/sbom-utility
`diff` panics while diffing two files
Open
bug
enhancement
help wanted
- Dominant language
- Go
- Stars
- 163
- Forks
- 21
- PR merge metrics
- No merged PRs in 30d
Description
Hi,
I'm trying to compare two SBoMs generated with two different versions of trivy.
sbom-utils thinks hard for a bit and then panics with `panic: runtime error: slice bounds out of range [2004:1743]`
Here are the files:
[nats-box-49.sbom.json](https://github.com/CycloneDX/sbom-utility/files/14669786/nats-box-49.sbom.json)
[nats-box-50.sbom.json](https://github.com/CycloneDX/sbom-utility/files/14669787/nats-box-50.sbom.json)
And this is the command line I've used:
```sh
sbom-utility diff --input-file nats-box-49.sbom.json --input-revision nats-box-50.sbom.json
```
Contributor guide
Assessment
This issue has not been assessed yet.