CycloneDX / CycloneDX/sbom-utility

`diff` panics while diffing two files

Open
#74 9 comments 0 reactions 1 assignee Claimed by @mrutkows View on GitHub
bug enhancement help wanted
Dominant language
Go
Stars
163
Forks
21
PR merge metrics
No merged PRs in 30d

Description

Hi,
I'm trying to compare two SBoMs generated with two different versions of trivy.

sbom-utils thinks hard for a bit and then panics with `panic: runtime error: slice bounds out of range [2004:1743]`

Here are the files:

[nats-box-49.sbom.json](https://github.com/CycloneDX/sbom-utility/files/14669786/nats-box-49.sbom.json)
[nats-box-50.sbom.json](https://github.com/CycloneDX/sbom-utility/files/14669787/nats-box-50.sbom.json)

And this is the command line I've used:
```sh
sbom-utility diff --input-file nats-box-49.sbom.json --input-revision nats-box-50.sbom.json
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.