DEBSBOM-SOURCE-MERGE(1)

📦 version 0.9.0, in ubuntu stonking

💖 NAME 💖

okay bestie, meet debsbom-source-merge — it's the source-merge command from the debsbom fam, and it's here to do one job and do it gorgeously ✨

🌸 SYNOPSIS 🌸

debsbom source-merge [-h] [-t {cdx,spdx}]
                     [--compress {no,bzip2,gzip,xz,zstd,lz4}]
                     [--apply-patches] [--mtime MTIME] [--pkgdir PKGDIR]
                     [--outdir OUTDIR]
                     [bomin]

no cap, that's the whole vibe 💅

🦋 DESCRIPTION 🦋

Merge referenced source packages. that's the tea 🫖

So basically it takes an SBOM, processes it, and merges the .orig and .debian tarballs together. iconic behavior honestly 👑

⚠️ bestie listen — the tarballs have to be downloaded first. this is not a "figure it out yourself" situation, the files gotta be there.

✨ OPTIONS ✨

🎀 Positional Arguments

  • bomin — the sbom file(s) to process for bomin. and ooh, cute trick: use '-' to read from stdin 🌈

🧚 Named Arguments

  • -t, --sbom-type — which SBOM type to process (default: auto-detect). this one is required when you're reading from stdin, so don't forget it 🙈 Possible choices: cdx, spdx
  • --compress='gzip' — compress the merged tarballs (default: gzip) 🗜️ Possible choices: no, bzip2, gzip, xz, zstd, lz4
  • --apply-patches=False — apply debian patches. slay 💅
  • --mtime — set the mtime for creating tar archives, in ISO 8601 format. If this option is not set, the timestamp from the most recent changelog entry is used instead — all in the name of reproducible builds ⭐
  • --pkgdir='downloads/sources' — the directory with the downloaded packages 🍓
  • --outdir='downloads/sources' — the directory where the merged files get stored 💜

👀 SEE ALSO 👀

go read those too, iykyk 📚

💀 DEBSBOM 💀

Part of the debsbom(1) suite. one big happy family fr fr 🫶

Author

Christoph Steiger, Felix Moessbauer 🌟

2025, Siemens

and that's the whole page bestie, go merge some tarballs, you're gonna eat 💅✨

this manual page is from debsbom, dated Jul 28, 2026 — mwah, tysm for reading, love u, bye 🎀💖

📦 where this page comes from