feat: prune graph edges to indirect dependencies for main module (#72)

* prune edges to indirect dependencies of main module Signed-off-by: nscuro <[email protected]> * regenerate example sboms Signed-off-by: nscuro <[email protected]> (partly) addresses #64
CycloneDX · Sep 27, 2021 · 375e844 · 375e844
1 parent 43e1e14
commit 375e844
Show file tree

Hide file tree

Showing 5 changed files with 40 additions and 217 deletions.
diff --git a/examples/app_minikube-v1.23.1.bom.json b/examples/app_minikube-v1.23.1.bom.json
@@ -1,35 +1,35 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.3",
-  "serialNumber": "urn:uuid:2df66088-ff65-4895-b7ed-8b980e6c677f",
+  "serialNumber": "urn:uuid:155657e1-9ae0-45d5-8db7-14eca53413c7",
   "version": 1,
   "metadata": {
-    "timestamp": "2021-09-25T19:52:57Z",
+    "timestamp": "2021-09-27T17:10:57Z",
     "tools": [
       {
         "vendor": "CycloneDX",
         "name": "cyclonedx-gomod",
-        "version": "v0.0.0-20210925214913-cdaccfe30cb0",
+        "version": "v0.0.0-20210927190843-0fa2b0329ce6",
         "hashes": [
           {
             "alg": "MD5",
-            "content": "d6c2bf92f7d13841ed21d9c409cf7cf4"
+            "content": "386bf2fe173bceda949b2191cc47f2ef"
           },
           {
             "alg": "SHA-1",
-            "content": "cf9246e05f2416552edbf4b40ef8c3df259ed751"
+            "content": "b43fb8be929ea96235f675dbf1136e52f409d1f9"
           },
           {
             "alg": "SHA-256",
-            "content": "890a85574c7f68b950f5bc5c08e5a3c32c06e8103de168d5721ec2dcc49fd3b9"
+            "content": "30d6e73c56ab47946ef0e659a9e5f8f8360a32dde54f51b62484e0b705cd1ce7"
           },
           {
             "alg": "SHA-384",
-            "content": "04d28e89523d14fc7dd32c54c4bdbbe99ac12fee427ff69d56ff3f9d98bde3880ab2b77520ff19fd620ab84d39920380"
+            "content": "3141646e7a6d7e789a6aa4bbb74076a5139ce69a10574483c7fd29ded9a9947678f2003e62669339b99318a683785955"
           },
           {
             "alg": "SHA-512",
-            "content": "ddfce73b8949a2d7878f1e9154cfc1228cb16cf55c6a7e57583cdc9ac286e653e8e285a64fda677bd8bc5d83dc85e1c1c54b630f2ab31c69881b1c09bf68538b"
+            "content": "3a3718c77815501e08d4757def4ea4f3a0f7fe4c7a913ede8b5b6c0696a2dc64d92e6ca1b362ac7c4d8256ea3bfa2b76e4dafee198012fe34a2bfaf42e7ed416"
           }
         ]
       }
@@ -3734,131 +3734,57 @@
     {
       "ref": "pkg:golang/k8s.io/[email protected]#cmd/minikube",
       "dependsOn": [
-        "pkg:golang/cloud.google.com/[email protected]",
         "pkg:golang/cloud.google.com/go/[email protected]",
-        "pkg:golang/cloud.google.com/go/[email protected]",
         "pkg:golang/github.com/Delta456/box-cli-maker/[email protected]",
         "pkg:golang/github.com/GoogleCloudPlatform/[email protected]",
         "pkg:golang/github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/[email protected]",
-        "pkg:golang/github.com/MakeNowJust/[email protected]",
-        "pkg:golang/github.com/VividCortex/[email protected]",
         "pkg:golang/github.com/VividCortex/[email protected]",
         "pkg:golang/github.com/alonyb/[email protected]",
-        "pkg:golang/github.com/aws/[email protected]",
-        "pkg:golang/github.com/bgentry/[email protected]",
         "pkg:golang/github.com/blang/semver/[email protected]",
         "pkg:golang/github.com/cenkalti/backoff/[email protected]",
         "pkg:golang/github.com/cheggaaa/pb/[email protected]",
         "pkg:golang/github.com/cloudevents/sdk-go/[email protected]",
         "pkg:golang/github.com/cloudfoundry-attic/[email protected]",
-        "pkg:golang/github.com/containerd/[email protected]",
-        "pkg:golang/github.com/containerd/stargz-snapshotter/[email protected]",
-        "pkg:golang/github.com/davecgh/[email protected]",
-        "pkg:golang/github.com/docker/[email protected]+incompatible",
-        "pkg:golang/github.com/docker/[email protected]+incompatible",
         "pkg:golang/github.com/docker/[email protected]+incompatible",
-        "pkg:golang/github.com/docker/[email protected]",
-        "pkg:golang/github.com/docker/[email protected]",
         "pkg:golang/github.com/docker/[email protected]",
-        "pkg:golang/github.com/fatih/[email protected]",
-        "pkg:golang/github.com/fsnotify/[email protected]",
-        "pkg:golang/github.com/go-logr/[email protected]",
-        "pkg:golang/github.com/gogo/[email protected]",
-        "pkg:golang/github.com/golang/[email protected]",
-        "pkg:golang/github.com/golang/[email protected]",
-        "pkg:golang/github.com/golang/[email protected]",
         "pkg:golang/github.com/google/[email protected]",
         "pkg:golang/github.com/google/[email protected]",
-        "pkg:golang/github.com/google/[email protected]",
         "pkg:golang/github.com/google/[email protected]",
         "pkg:golang/github.com/google/[email protected]",
-        "pkg:golang/github.com/googleapis/gax-go/[email protected]",
-        "pkg:golang/github.com/googleapis/[email protected]",
-        "pkg:golang/github.com/gookit/[email protected]",
-        "pkg:golang/github.com/hashicorp/[email protected]",
         "pkg:golang/github.com/hashicorp/[email protected]",
-        "pkg:golang/github.com/hashicorp/[email protected]",
-        "pkg:golang/github.com/hashicorp/[email protected]",
-        "pkg:golang/github.com/hashicorp/[email protected]",
-        "pkg:golang/github.com/hashicorp/[email protected]",
-        "pkg:golang/github.com/hectane/[email protected]",
-        "pkg:golang/github.com/imdario/[email protected]",
-        "pkg:golang/github.com/intel-go/[email protected]",
-        "pkg:golang/github.com/jmespath/[email protected]",
-        "pkg:golang/github.com/json-iterator/[email protected]",
         "pkg:golang/github.com/juju/[email protected]",
-        "pkg:golang/github.com/juju/[email protected]",
         "pkg:golang/github.com/juju/[email protected]",
         "pkg:golang/github.com/juju/[email protected]",
         "pkg:golang/github.com/kballard/[email protected]",
-        "pkg:golang/github.com/klauspost/[email protected]",
         "pkg:golang/github.com/klauspost/[email protected]",
         "pkg:golang/github.com/machine-drivers/[email protected]",
         "pkg:golang/github.com/machine-drivers/[email protected]",
-        "pkg:golang/github.com/magiconair/[email protected]",
-        "pkg:golang/github.com/mattn/[email protected]",
         "pkg:golang/github.com/mattn/[email protected]",
-        "pkg:golang/github.com/mattn/[email protected]",
-        "pkg:golang/github.com/mitchellh/[email protected]",
         "pkg:golang/github.com/mitchellh/[email protected]",
-        "pkg:golang/github.com/mitchellh/[email protected]",
-        "pkg:golang/github.com/mitchellh/[email protected]",
-        "pkg:golang/github.com/mitchellh/[email protected]",
-        "pkg:golang/github.com/moby/[email protected]",
-        "pkg:golang/github.com/moby/sys/[email protected]",
-        "pkg:golang/github.com/moby/sys/[email protected]",
-        "pkg:golang/github.com/moby/[email protected]",
-        "pkg:golang/github.com/modern-go/[email protected]",
-        "pkg:golang/github.com/modern-go/[email protected]",
         "pkg:golang/github.com/olekukonko/[email protected]",
         "pkg:golang/github.com/opencontainers/[email protected]",
-        "pkg:golang/github.com/opencontainers/[email protected]",
-        "pkg:golang/github.com/opencontainers/[email protected]",
         "pkg:golang/github.com/otiai10/[email protected]",
-        "pkg:golang/github.com/pelletier/[email protected]",
         "pkg:golang/github.com/phayes/[email protected]",
         "pkg:golang/github.com/pkg/[email protected]",
         "pkg:golang/github.com/pkg/[email protected]",
         "pkg:golang/github.com/pkg/[email protected]",
-        "pkg:golang/github.com/rivo/[email protected]",
-        "pkg:golang/github.com/russross/[email protected]",
         "pkg:golang/github.com/sayboras/[email protected]",
         "pkg:golang/github.com/shirou/gopsutil/[email protected]",
-        "pkg:golang/github.com/sirupsen/[email protected]",
-        "pkg:golang/github.com/spf13/[email protected]",
-        "pkg:golang/github.com/spf13/[email protected]",
         "pkg:golang/github.com/spf13/[email protected]",
-        "pkg:golang/github.com/spf13/[email protected]",
         "pkg:golang/github.com/spf13/[email protected]",
         "pkg:golang/github.com/spf13/[email protected]",
-        "pkg:golang/github.com/subosito/[email protected]",
-        "pkg:golang/github.com/tklauser/[email protected]",
-        "pkg:golang/github.com/tklauser/[email protected]",
-        "pkg:golang/github.com/ulikunitz/[email protected]",
-        "pkg:golang/github.com/xo/[email protected]",
         "pkg:golang/[email protected]",
         "pkg:golang/go.opentelemetry.io/[email protected]",
-        "pkg:golang/go.opentelemetry.io/otel/[email protected]",
         "pkg:golang/go.opentelemetry.io/otel/[email protected]",
         "pkg:golang/go.opentelemetry.io/otel/[email protected]",
-        "pkg:golang/go.uber.org/[email protected]",
-        "pkg:golang/go.uber.org/[email protected]",
-        "pkg:golang/go.uber.org/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
-        "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/golang.org/x/[email protected]",
-        "pkg:golang/golang.org/x/[email protected]",
         "pkg:golang/google.golang.org/[email protected]",
-        "pkg:golang/google.golang.org/[email protected]",
-        "pkg:golang/google.golang.org/[email protected]",
-        "pkg:golang/google.golang.org/[email protected]",
-        "pkg:golang/gopkg.in/[email protected]",
-        "pkg:golang/gopkg.in/[email protected]",
         "pkg:golang/gopkg.in/[email protected]",
         "pkg:golang/k8s.io/[email protected]",
         "pkg:golang/k8s.io/[email protected]",
@@ -3867,10 +3793,7 @@
         "pkg:golang/k8s.io/[email protected]",
         "pkg:golang/k8s.io/klog/[email protected]",
         "pkg:golang/k8s.io/[email protected]",
-        "pkg:golang/k8s.io/[email protected]",
-        "pkg:golang/k8s.io/[email protected]",
-        "pkg:golang/sigs.k8s.io/structured-merge-diff/[email protected]",
-        "pkg:golang/sigs.k8s.io/[email protected]"
+        "pkg:golang/k8s.io/[email protected]"
       ]
     },
     {

diff --git a/examples/bin_minikube-v1.23.1.bom.json b/examples/bin_minikube-v1.23.1.bom.json
@@ -1,35 +1,35 @@
 {
   "bomFormat": "CycloneDX",
   "specVersion": "1.3",
-  "serialNumber": "urn:uuid:5171defc-4ecb-4275-b1ef-bf5ff059ed56",
+  "serialNumber": "urn:uuid:535fb858-243e-4c6e-b2f3-14747c45bfda",
   "version": 1,
   "metadata": {
-    "timestamp": "2021-09-25T19:53:42Z",
+    "timestamp": "2021-09-27T17:11:26Z",
     "tools": [
       {
         "vendor": "CycloneDX",
         "name": "cyclonedx-gomod",
-        "version": "v0.0.0-20210925214913-cdaccfe30cb0",
+        "version": "v0.0.0-20210927190843-0fa2b0329ce6",
         "hashes": [
           {
             "alg": "MD5",
-            "content": "d6c2bf92f7d13841ed21d9c409cf7cf4"
+            "content": "386bf2fe173bceda949b2191cc47f2ef"
           },
           {
             "alg": "SHA-1",
-            "content": "cf9246e05f2416552edbf4b40ef8c3df259ed751"
+            "content": "b43fb8be929ea96235f675dbf1136e52f409d1f9"
           },
           {
             "alg": "SHA-256",
-            "content": "890a85574c7f68b950f5bc5c08e5a3c32c06e8103de168d5721ec2dcc49fd3b9"
+            "content": "30d6e73c56ab47946ef0e659a9e5f8f8360a32dde54f51b62484e0b705cd1ce7"
           },
           {
             "alg": "SHA-384",
-            "content": "04d28e89523d14fc7dd32c54c4bdbbe99ac12fee427ff69d56ff3f9d98bde3880ab2b77520ff19fd620ab84d39920380"
+            "content": "3141646e7a6d7e789a6aa4bbb74076a5139ce69a10574483c7fd29ded9a9947678f2003e62669339b99318a683785955"
           },
           {
             "alg": "SHA-512",
-            "content": "ddfce73b8949a2d7878f1e9154cfc1228cb16cf55c6a7e57583cdc9ac286e653e8e285a64fda677bd8bc5d83dc85e1c1c54b630f2ab31c69881b1c09bf68538b"
+            "content": "3a3718c77815501e08d4757def4ea4f3a0f7fe4c7a913ede8b5b6c0696a2dc64d92e6ca1b362ac7c4d8256ea3bfa2b76e4dafee198012fe34a2bfaf42e7ed416"
           }
         ]
       }