/opt/chainguard/checkov/bin/pyspdxtools

Usage: pyspdxtools [OPTIONS]

  CLI-tool for validating SPDX documents and converting between RDF, TAG-
  VALUE, JSON, YAML and XML formats. Formats are determined by the file
  endings. To use, run: 'pyspdxtools --infile <input file name> --outfile
  <output file name>'

Options:
  -i, --infile TEXT   The file containing the document to be validated or
                      converted.  [required]
  -o, --outfile TEXT  The file to write the converted document to (write a
                      dash for output to stdout or omit for no conversion). If
                      you add the option --graph to the command the generated
                      graph will be written to this file.
  --version TEXT      The SPDX version to be used during parsing and
                      validation ("SPDX-2.2" or "SPDX-2.3"). Will be read from
                      the document if not provided.
  --novalidation      Don't validate the provided document.
  --graph             Generate a relationship graph from the input file. The
                      generated graph is saved to the file specified with
                      --outfile. Note: You need to install the optional
                      dependencies 'networkx' and 'pygraphviz' for this
                      feature.
  --help              Show this message and exit.