add schemaValidation method

Author: viveksahu26

pkg/sbom/cdx.go

@@ -51,6 +51,7 @@ type CdxDoc struct {
 	format           FileFormat
 	ctx              context.Context
 	CdxSpec          *Specs
+	cdxValidSchema   bool
 	Comps            []GetComponent
 	CdxAuthors       []GetAuthor
 	CdxTools         []GetTool
@@ -98,6 +99,7 @@ func newCDXDoc(ctx context.Context, f io.ReadSeeker, format FileFormat, sig Sign
 		doc:             bom,
 		format:          format,
 		ctx:             ctx,
+		cdxValidSchema:  true,
 		SignatureDetail: &sig,
 	}
 	doc.parse()
@@ -161,6 +163,10 @@ func (c CdxDoc) Signature() GetSignature {
 	return c.SignatureDetail
 }
 
+func (c CdxDoc) SchemaValidation() bool {
+	return c.cdxValidSchema
+}
+
 func (c *CdxDoc) parse() {
 	c.parseDoc()
 	c.parseSpec()

pkg/sbom/document.go

@@ -19,6 +19,7 @@ package sbom
 //counterfeiter:generate . Document
 type Document interface {
 	Spec() Spec
+	SchemaValidation() bool
 	Components() []GetComponent
 	Relations() []GetRelation
 	Authors() []GetAuthor

pkg/sbom/sbom.go

@@ -66,9 +66,9 @@ func SupportedSBOMSpecs() []string {
 
 func SupportedSBOMSpecVersions(f string) []string {
 	switch strings.ToLower(f) {
-	case "cyclonedx":
+	case string(SBOMSpecCDX):
 		return cdxSpecVersions
-	case "spdx":
+	case string(SBOMSpecSPDX):
 		return spdxSpecVersions
 	default:
 		return []string{}
@@ -173,7 +173,7 @@ func NewSBOMDocument(ctx context.Context, f io.ReadSeeker, sig Signature) (Docum
 		return nil, err
 	}
 
-	log.Debugf("SBOM detect spec:%s format:%s", spec, format)
+	log.Debugf("SBOM detect spec:%s version:%s format:%s ", spec, version, format)
 
 	var doc Document
 

pkg/sbom/spdx.go

@@ -48,6 +48,7 @@ type SpdxDoc struct {
 	version          FormatVersion
 	ctx              context.Context
 	SpdxSpec         *Specs
+	spdxValidSchema  bool
 	Comps            []GetComponent
 	Auths            []GetAuthor
 	SpdxTools        []GetTool
@@ -94,6 +95,7 @@ func newSPDXDoc(ctx context.Context, f io.ReadSeeker, format FileFormat, version
 		format:          format,
 		ctx:             ctx,
 		version:         version,
+		spdxValidSchema: true,
 		SignatureDetail: &sig,
 	}
 
@@ -163,6 +165,10 @@ func (s SpdxDoc) Signature() GetSignature {
 	return s.SignatureDetail
 }
 
+func (s SpdxDoc) SchemaValidation() bool {
+	return s.spdxValidSchema
+}
+
 func (s *SpdxDoc) parse() {
 	s.parseDoc()
 	s.parseSpec()