Man page - debsbom-source-merge(1)

Packages contas this manual

Manual

DEBSBOM-SOURCE-MERGE(1) debsbom DEBSBOM-SOURCE-MERGE(1)

debsbom-source-merge - debsbom source-merge command

debsbom source-merge [-h] [-t {cdx,spdx}]


                     [--compress {no,bzip2,gzip,xz,zstd,lz4}]


                     [--apply-patches] [--mtime MTIME] [--pkgdir PKGDIR]


                     [--outdir OUTDIR]


                     [bomin]


Merge referenced source packages

Processes an SBOM and merges the .orig and .debian tarballs. The tarballs have to be downloaded first.

Positional Arguments

sbom file(s) to process for 'bomin'. Use '-' to read from stdin

Named Arguments

SBOM type to process (default: auto-detect), required when reading from stdin

Possible choices: cdx, spdx

compress merged tarballs (default: gzip)

Possible choices: no, bzip2, gzip, xz, zstd, lz4

apply debian patches
set mtime for creating tar archives in ISO 8601 format. If this option is not set, the timestamp from the most recent changelog entry is used for reproducible builds.
directory with downloaded packages
directory to store the merged files

debsbom-download(1), debsbom-repack(1)

Part of the debsbom(1) suite.

Christoph Steiger, Felix Moessbauer

2025, Siemens

March 24, 2026