Custom Validator Capability Question

[ralphie79]

I've been reading up on the experimental custom validation feature and cannot conclusively determine if it supports the intended (#135) ability to validate anywhere in the SBOM structure. Specifically, I have a use case for validating that all components contain custom properties.

All examples for the JSON-based custom validation have simpler selectors that appear to only operate at the document level and not iteratively across arrays like components.

Is this kind of feature currently supported?

[mrutkows]

Hi @ralphie79, Hoping you can send me both your input JSON BOM and command line query so I can take a look at what you are trying to do... The query should work against most fields which have non-complex types that can resolve to regex. comparisons, but esp. against top-level elements like components (i.e., --select --from --where <field=regex>). However, it seems like you need a multiple-level query on a complex field (i.e., properties). I do not know if this is easily implementable, but willing to give it some thought if you can provide me the testcase.

Thanks.