diff --git a/test/sbom/README.md b/test/sbom/README.md
new file mode 100644
index 0000000000..cab406c2f6
--- /dev/null
+++ b/test/sbom/README.md
@@ -0,0 +1,25 @@
+# SBOM Testing
+
+## Container Images
+
+We use the following container images to test the SBOM generation:
+
+| OS                    | Version                           |
+|-----------------------|-----------------------------------|
+| Alpine Linux          | 3.14, 3.15, 3.16, 3.17, 3.18      |
+| AlmaLinux             | 8, 9                              |
+| Amazon Linux          | 2018, 2, 2023                     |
+| CentOS                | 6, 7, 8, Stream 8, Stream 9       |
+| Debian Linux          | 7, 8, 9, 10, 11, 12               |
+| Fedora Linux          | 34-40                             |
+| openSUSE Leap         | 42, 15                            |
+| openSUSE Tumbleweed   | Rolling                           |
+| Oracle Linux          | 6, 7, 8, 9                        |
+| Photon                | 4, 5                              |
+| Red Hat Linux         | 6, 7, 8, 9                        |
+| Rocky Linux           | 8, 9                              |
+| Suse Enterprise Linux | 12, 15                            |
+| Ubuntu                | 14.04, 16.04, 18.04, 20.04, 22.04 |
+
+
+
diff --git a/test/sbom/sbom_test.go b/test/sbom/sbom_test.go
new file mode 100644
index 0000000000..b185ca743f
--- /dev/null
+++ b/test/sbom/sbom_test.go
@@ -0,0 +1,131 @@
+// Copyright (c) Mondoo, Inc.
+// SPDX-License-Identifier: BUSL-1.1
+
+//go:build debugtest
+// +build debugtest
+
+package sbom
+
+import (
+	"os/exec"
+	"sync"
+
+	"bytes"
+	"fmt"
+	"log"
+	"os"
+	"strings"
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+var once sync.Once
+
+// setup builds cnquery locally
+func setup() {
+	if err := exec.Command("go", "build", "../../apps/cnquery/cnquery.go").Run(); err != nil {
+		log.Fatalf("building cnquery: %v", err)
+	}
+}
+
+func TestMain(m *testing.M) {
+	ret := m.Run()
+	os.Exit(ret)
+}
+
+func TestSbomGeneration(t *testing.T) {
+	once.Do(setup)
+
+	images := []string{
+		"alpine:3.16",
+		"alpine:3.17",
+		"alpine:3.18",
+		"alpine:3.19",
+		"almalinux:8.9",
+		"almalinux:9.3",
+		"amazonlinux:2",
+		"amazonlinux:2023",
+		"centos:7",
+		"centos:8",
+		"debian:7",
+		"debian:8",
+		"debian:9",
+		"debian:10",
+		"debian:11",
+		"debian:12",
+		"fedora:37",
+		"fedora:38",
+		"fedora:39",
+		"fedora:40",
+		"opensuse/leap:15.5",
+		"opensuse/leap:42.3",
+		"opensuse/tumbleweed",
+		"oraclelinux:8.9",
+		"oraclelinux:9",
+		"photon:3.0",
+		"photon:4.0",
+		"photon:5.0",
+		"registry.access.redhat.com/ubi7/ubi-minimal:7.9-1313",
+		"registry.access.redhat.com/ubi8/ubi:8.0-122",
+		"registry.access.redhat.com/ubi8/ubi:8.9-1107",
+		"rockylinux:8.9",
+		"rockylinux:9.3",
+		"registry.suse.com/bci/bci-base:15.5",
+		"registry.suse.com/suse/sles12sp5:6.5.559",
+		"ubuntu:14.04",
+		"ubuntu:16.04",
+		"ubuntu:18.04",
+		"ubuntu:20.04",
+		"ubuntu:22.04",
+	}
+
+	// test all images sequentially since they use os.stdout
+	for i := range images {
+		t.Run(images[i], func(t *testing.T) {
+			testSbomExport(t, images[i], false, false)
+		})
+	}
+}
+
+func testSbomExport(t *testing.T, img string, update bool, useRecording bool) {
+	fileImgName := strings.ReplaceAll(img, ":", "-")
+	fileImgName = strings.ReplaceAll(fileImgName, ".", "-")
+	fileImgName = strings.ReplaceAll(fileImgName, "/", "-")
+
+	args := []string{"sbom", "docker", img}
+	if useRecording {
+		args = append(args, "--use-recording", "testdata/"+fileImgName+"-recording.json")
+	}
+	cmd := exec.Command("./cnquery", args...)
+
+	var stdout, stderr bytes.Buffer
+	cmd.Stdout = &stdout
+	cmd.Stderr = &stderr
+
+	if err := cmd.Start(); err != nil {
+		fmt.Printf("Error starting command: %s\n", err)
+		return
+	}
+
+	// Wait for the command to finish
+	if err := cmd.Wait(); err != nil {
+		fmt.Printf("Command finished with error: %v\n", err)
+	}
+
+	// Check the output
+	fmt.Println("stdout:\n", stdout.String())
+	fmt.Println("stderr:\n", stderr.String())
+
+	if update {
+		os.WriteFile("testdata/"+fileImgName+"-cli.txt", stdout.Bytes(), 0600)
+	}
+
+	expected, err := os.ReadFile("testdata/" + fileImgName + "-cli.txt")
+	require.NoError(t, err)
+
+	output := stdout.String()
+	assert.Equal(t, string(expected), output)
+	assert.NotEmpty(t, strings.TrimSpace(output))
+}
diff --git a/test/sbom/testdata/almalinux-8-9-cli.txt b/test/sbom/testdata/almalinux-8-9-cli.txt
new file mode 100644
index 0000000000..877fa17869
--- /dev/null
+++ b/test/sbom/testdata/almalinux-8-9-cli.txt
@@ -0,0 +1,156 @@
+rpm/acl/2.2.53-1.el8
+rpm/almalinux-release/8.9-1.el8
+rpm/audit-libs/3.0.7-5.el8
+rpm/basesystem/11-5.el8
+rpm/bash/4.4.20-4.el8_6
+rpm/binutils/2.30-123.el8
+rpm/bzip2-libs/1.0.6-26.el8
+rpm/ca-certificates/2023.2.60_v7.0.306-80.0.el8_8
+rpm/chkconfig/1.19.2-1.el8
+rpm/coreutils-single/8.30-15.el8
+rpm/cracklib/2.9.6-15.el8
+rpm/cracklib-dicts/2.9.6-15.el8
+rpm/crypto-policies/20230731-1.git3177e06.el8
+rpm/cryptsetup-libs/2.3.7-7.el8
+rpm/curl/7.61.1-33.el8
+rpm/cyrus-sasl-lib/2.1.27-6.el8_5
+rpm/dbus/1:1.12.8-26.el8
+rpm/dbus-common/1:1.12.8-26.el8
+rpm/dbus-daemon/1:1.12.8-26.el8
+rpm/dbus-libs/1:1.12.8-26.el8
+rpm/dbus-tools/1:1.12.8-26.el8
+rpm/device-mapper/8:1.02.181-13.el8_9
+rpm/device-mapper-libs/8:1.02.181-13.el8_9
+rpm/dnf/4.7.0-19.el8.alma
+rpm/dnf-data/4.7.0-19.el8.alma
+rpm/elfutils-default-yama-scope/0.189-3.el8
+rpm/elfutils-libelf/0.189-3.el8
+rpm/elfutils-libs/0.189-3.el8
+rpm/expat/2.2.5-11.el8
+rpm/file-libs/5.33-25.el8
+rpm/filesystem/3.8-6.el8
+rpm/findutils/1:4.6.0-21.el8
+rpm/gawk/4.2.1-4.el8
+rpm/gdbm/1:1.18-2.el8
+rpm/gdbm-libs/1:1.18-2.el8
+rpm/glib2/2.56.4-161.el8
+rpm/glibc/2.28-236.el8.7
+rpm/glibc-common/2.28-236.el8.7
+rpm/glibc-minimal-langpack/2.28-236.el8.7
+rpm/gmp/1:6.1.2-10.el8
+rpm/gnupg2/2.2.20-3.el8_6
+rpm/gnutls/3.6.16-7.el8
+pypi/gpg/1.13.1 /usr/lib64/python3.6/site-packages/gpg-1.13.1-py3.6.egg-info
+rpm/gpg-pubkey/ced7258b-6525146f
+rpm/gpg-pubkey/3abb34f8-5ffd890e
+rpm/gpgme/1.13.1-11.el8
+rpm/grep/3.1-6.el8
+rpm/gzip/1.9-13.el8_5
+rpm/hostname/3.20-6.el8
+rpm/ima-evm-utils/1.3.2-12.el8
+rpm/info/6.5-7.el8
+rpm/iputils/20180629-11.el8
+rpm/json-c/0.13.1-3.el8
+rpm/keyutils-libs/1.5.10-9.el8
+rpm/kmod-libs/25-19.el8
+rpm/krb5-libs/1.18.2-26.el8_9
+rpm/langpacks-en/1.0-12.el8
+rpm/less/530-1.el8
+rpm/libacl/2.2.53-1.el8
+rpm/libarchive/3.3.3-5.el8
+rpm/libassuan/2.5.1-3.el8
+rpm/libattr/2.4.48-3.el8
+rpm/libblkid/2.32.1-43.el8
+rpm/libcap/2.48-5.el8_8
+rpm/libcap-ng/0.7.11-1.el8
+rpm/libcom_err/1.45.6-5.el8
+rpm/libcomps/0.1.18-1.el8
+pypi/libcomps/0.1.18 /usr/lib64/python3.6/site-packages/libcomps-0.1.18-py3.6.egg-info/PKG-INFO
+rpm/libcurl-minimal/7.61.1-33.el8
+rpm/libdb/5.3.28-42.el8_4
+rpm/libdb-utils/5.3.28-42.el8_4
+rpm/libdnf/0.63.0-17.el8_9.alma
+rpm/libfdisk/2.32.1-43.el8
+rpm/libffi/3.1-24.el8
+rpm/libgcc/8.5.0-20.el8.alma
+rpm/libgcrypt/1.8.5-7.el8_6
+rpm/libgpg-error/1.31-1.el8
+rpm/libidn2/2.2.0-1.el8
+rpm/libksba/1.3.5-9.el8_7
+rpm/libmodulemd/2.13.0-1.el8
+rpm/libmount/2.32.1-43.el8
+rpm/libnghttp2/1.33.0-5.el8_9
+rpm/libnsl2/1.2.0-2.20180605git4a062cf.el8
+rpm/libpwquality/1.4.4-6.el8
+rpm/librepo/1.14.2-4.el8
+rpm/libreport-filesystem/2.9.5-15.el8.alma.1
+rpm/libseccomp/2.5.2-1.el8
+rpm/libselinux/2.9-8.el8
+rpm/libsemanage/2.9-9.el8_6
+rpm/libsepol/2.9-3.el8
+rpm/libsigsegv/2.11-5.el8
+rpm/libsmartcols/2.32.1-43.el8
+rpm/libsolv/0.7.20-6.el8
+rpm/libstdc++/8.5.0-20.el8.alma
+rpm/libtasn1/4.13-4.el8_7
+rpm/libtirpc/1.1.4-8.el8
+rpm/libunistring/0.9.9-3.el8
+rpm/libusbx/1.0.23-4.el8
+rpm/libutempter/1.1.6-14.el8
+rpm/libuuid/2.32.1-43.el8
+rpm/libverto/0.3.2-2.el8
+rpm/libxcrypt/4.1.1-6.el8
+rpm/libxml2/2.9.7-16.el8_8.1
+rpm/libyaml/0.1.7-5.el8
+rpm/libzstd/1.4.4-1.el8
+rpm/lua-libs/5.3.4-12.el8
+rpm/lz4-libs/1.8.3-3.el8_4
+rpm/mpfr/3.1.6-1.el8
+rpm/ncurses-base/6.1-10.20180224.el8
+rpm/ncurses-libs/6.1-10.20180224.el8
+rpm/nettle/3.4.1-7.el8
+rpm/npth/1.5-4.el8
+rpm/openldap/2.4.46-18.el8
+rpm/openssl-libs/1:1.1.1k-9.el8_7
+rpm/p11-kit/0.23.22-1.el8
+rpm/p11-kit-trust/0.23.22-1.el8
+rpm/pam/1.3.1-27.el8
+rpm/pcre/8.42-6.el8
+rpm/pcre2/10.32-3.el8_6
+rpm/platform-python/3.6.8-56.el8_9.alma.1
+rpm/platform-python-setuptools/39.2.0-7.el8
+rpm/popt/1.18-1.el8
+rpm/python3-dnf/4.7.0-19.el8.alma
+rpm/python3-gpg/1.13.1-11.el8
+rpm/python3-hawkey/0.63.0-17.el8_9.alma
+rpm/python3-libcomps/0.1.18-1.el8
+rpm/python3-libdnf/0.63.0-17.el8_9.alma
+rpm/python3-libs/3.6.8-56.el8_9.alma.1
+rpm/python3-pip-wheel/9.0.3-23.el8
+rpm/python3-rpm/4.14.3-26.el8
+rpm/python3-setuptools-wheel/39.2.0-7.el8
+rpm/readline/7.0-10.el8
+rpm/rootfiles/8.1-22.el8
+rpm/rpm/4.14.3-26.el8
+pypi/rpm/4.14.3 /usr/lib64/python3.6/site-packages/rpm-4.14.3-py3.6.egg-info
+rpm/rpm-build-libs/4.14.3-26.el8
+rpm/rpm-libs/4.14.3-26.el8
+rpm/sed/4.5-5.el8
+rpm/setup/2.12.2-9.el8
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+rpm/shadow-utils/2:4.6-19.el8
+rpm/sqlite-libs/3.26.0-18.el8_8
+rpm/systemd/239-78.el8
+rpm/systemd-libs/239-78.el8
+rpm/systemd-pam/239-78.el8
+rpm/tar/2:1.30-9.el8
+rpm/tpm2-tss/2.3.2-5.el8
+rpm/tzdata/2023c-1.el8
+rpm/util-linux/2.32.1-43.el8
+rpm/vim-minimal/2:8.0.1763-19.el8_6.4
+rpm/xz/5.2.4-4.el8_6
+rpm/xz-libs/5.2.4-4.el8_6
+rpm/yum/4.7.0-19.el8.alma
+rpm/zlib/1.2.11-25.el8
+
diff --git a/test/sbom/testdata/almalinux-9-3-cli.txt b/test/sbom/testdata/almalinux-9-3-cli.txt
new file mode 100644
index 0000000000..ee23081e78
--- /dev/null
+++ b/test/sbom/testdata/almalinux-9-3-cli.txt
@@ -0,0 +1,153 @@
+rpm/acl/2.3.1-3.el9
+rpm/almalinux-gpg-keys/9.3-1.el9
+rpm/almalinux-release/9.3-1.el9
+rpm/almalinux-repos/9.3-1.el9
+rpm/alternatives/1.24-1.el9
+rpm/audit-libs/3.0.7-104.el9
+rpm/basesystem/11-13.el9
+rpm/bash/5.1.8-6.el9_1
+rpm/binutils/2.35.2-42.el9
+rpm/binutils-gold/2.35.2-42.el9
+rpm/bzip2-libs/1.0.8-8.el9
+rpm/ca-certificates/2023.2.60_v7.0.306-90.1.el9_2
+rpm/coreutils-single/8.32-34.el9
+rpm/cracklib/2.9.6-27.el9
+rpm/cracklib-dicts/2.9.6-27.el9
+rpm/crypto-policies/20230731-1.git94f0e2c.el9_3.1
+rpm/crypto-policies-scripts/20230731-1.git94f0e2c.el9_3.1
+rpm/curl-minimal/7.76.1-26.el9_3.2
+rpm/cyrus-sasl-lib/2.1.27-21.el9
+rpm/dbus/1:1.12.20-8.el9
+rpm/dbus-broker/28-7.el9
+rpm/dbus-common/1:1.12.20-8.el9
+rpm/dnf/4.14.0-8.el9.alma.1
+rpm/dnf-data/4.14.0-8.el9.alma.1
+rpm/elfutils-debuginfod-client/0.189-3.el9
+rpm/elfutils-default-yama-scope/0.189-3.el9
+rpm/elfutils-libelf/0.189-3.el9
+rpm/elfutils-libs/0.189-3.el9
+rpm/expat/2.5.0-1.el9
+rpm/file-libs/5.39-14.el9
+rpm/filesystem/3.16-2.el9
+rpm/findutils/1:4.8.0-6.el9
+rpm/gawk/5.1.0-6.el9
+rpm/gdbm-libs/1:1.19-4.el9
+rpm/glib2/2.68.4-11.el9
+rpm/glibc/2.34-83.el9_3.7
+rpm/glibc-common/2.34-83.el9_3.7
+rpm/glibc-minimal-langpack/2.34-83.el9_3.7
+rpm/gmp/1:6.2.0-13.el9
+rpm/gnupg2/2.3.3-4.el9
+rpm/gnutls/3.7.6-23.el9
+pypi/gpg/1.15.1 /usr/lib64/python3.9/site-packages/gpg-1.15.1-py3.9.egg-info
+rpm/gpg-pubkey/b86b3716-61e69f29
+rpm/gpgme/1.15.1-6.el9
+rpm/grep/3.6-5.el9
+rpm/gzip/1.12-1.el9
+rpm/hostname/3.23-6.el9
+rpm/ima-evm-utils/1.4-4.el9
+rpm/iputils/20210202-9.el9
+rpm/json-c/0.14-11.el9
+rpm/keyutils-libs/1.6.3-1.el9
+rpm/kmod-libs/28-9.el9
+rpm/krb5-libs/1.21.1-1.el9
+rpm/less/590-2.el9_2
+rpm/libacl/2.3.1-3.el9
+rpm/libarchive/3.5.3-4.el9
+rpm/libassuan/2.5.5-3.el9
+rpm/libattr/2.5.1-3.el9
+rpm/libblkid/2.37.4-15.el9
+rpm/libcap/2.48-9.el9_2
+rpm/libcap-ng/0.8.2-7.el9
+rpm/libcom_err/1.46.5-3.el9
+rpm/libcomps/0.1.18-1.el9
+pypi/libcomps/0.1.18 /usr/lib64/python3.9/site-packages/libcomps-0.1.18-py3.9.egg-info/PKG-INFO
+rpm/libcurl-minimal/7.76.1-26.el9_3.2
+rpm/libdb/5.3.28-53.el9
+rpm/libdnf/0.69.0-6.el9_3.alma.1
+rpm/libeconf/0.4.1-3.el9_2
+rpm/libevent/2.1.12-6.el9
+rpm/libfdisk/2.37.4-15.el9
+rpm/libffi/3.4.2-8.el9
+rpm/libgcc/11.4.1-2.1.el9.alma
+rpm/libgcrypt/1.10.0-10.el9_2
+rpm/libgomp/11.4.1-2.1.el9.alma
+rpm/libgpg-error/1.42-5.el9
+rpm/libidn2/2.3.0-7.el9
+rpm/libksba/1.5.1-6.el9_1
+rpm/libmodulemd/2.13.0-2.el9
+rpm/libmount/2.37.4-15.el9
+rpm/libnghttp2/1.43.0-5.el9_3.1
+rpm/libpwquality/1.4.4-8.el9
+rpm/librepo/1.14.5-1.el9
+rpm/libreport-filesystem/2.15.2-6.el9.alma
+rpm/libseccomp/2.5.2-2.el9
+rpm/libselinux/3.5-1.el9
+rpm/libsemanage/3.5-2.el9
+rpm/libsepol/3.5-1.el9
+rpm/libsigsegv/2.13-4.el9
+rpm/libsmartcols/2.37.4-15.el9
+rpm/libsolv/0.7.24-2.el9
+rpm/libstdc++/11.4.1-2.1.el9.alma
+rpm/libtasn1/4.16.0-8.el9_1
+rpm/libunistring/0.9.10-15.el9
+rpm/libutempter/1.2.1-6.el9
+rpm/libuuid/2.37.4-15.el9
+rpm/libverto/0.3.2-3.el9
+rpm/libxcrypt/4.4.18-3.el9
+rpm/libxml2/2.9.13-4.el9
+rpm/libyaml/0.2.5-7.el9
+rpm/libzstd/1.5.1-2.el9
+rpm/lua-libs/5.4.4-4.el9
+rpm/lz4-libs/1.9.3-5.el9
+rpm/mpfr/4.1.0-7.el9
+rpm/ncurses-base/6.2-10.20210508.el9
+rpm/ncurses-libs/6.2-10.20210508.el9
+rpm/nettle/3.8-3.el9_0
+rpm/npth/1.6-8.el9
+rpm/openldap/2.6.3-1.el9
+rpm/openssl/1:3.0.7-24.el9
+rpm/openssl-libs/1:3.0.7-24.el9
+rpm/p11-kit/0.24.1-2.el9
+rpm/p11-kit-trust/0.24.1-2.el9
+rpm/pam/1.5.1-15.el9
+rpm/pcre/8.44-3.el9.3
+rpm/pcre2/10.40-2.el9
+rpm/pcre2-syntax/10.40-2.el9
+rpm/popt/1.18-8.el9
+rpm/python3/3.9.18-1.el9_3
+rpm/python3-dnf/4.14.0-8.el9.alma.1
+rpm/python3-gpg/1.15.1-6.el9
+rpm/python3-hawkey/0.69.0-6.el9_3.alma.1
+rpm/python3-libcomps/0.1.18-1.el9
+rpm/python3-libdnf/0.69.0-6.el9_3.alma.1
+rpm/python3-libs/3.9.18-1.el9_3
+rpm/python3-pip-wheel/21.2.3-7.el9
+rpm/python3-rpm/4.16.1.3-25.el9
+rpm/python3-setuptools-wheel/53.0.0-12.el9
+rpm/readline/8.1-4.el9
+rpm/rootfiles/8.1-31.el9
+rpm/rpm/4.16.1.3-25.el9
+pypi/rpm/4.16.1.3 /usr/lib64/python3.9/site-packages/rpm-4.16.1.3-py3.9.egg-info
+rpm/rpm-build-libs/4.16.1.3-25.el9
+rpm/rpm-libs/4.16.1.3-25.el9
+rpm/rpm-sign-libs/4.16.1.3-25.el9
+rpm/sed/4.8-9.el9
+rpm/setup/2.13.7-9.el9
+rpm/shadow-utils/2:4.9-8.el9
+rpm/sqlite-libs/3.34.1-6.el9_1
+rpm/systemd/252-18.el9
+rpm/systemd-libs/252-18.el9
+rpm/systemd-pam/252-18.el9
+rpm/systemd-rpm-macros/252-18.el9
+rpm/tar/2:1.34-6.el9_1
+rpm/tpm2-tss/3.2.2-2.el9
+rpm/tzdata/2023c-1.el9
+rpm/util-linux/2.37.4-15.el9
+rpm/util-linux-core/2.37.4-15.el9
+rpm/vim-minimal/2:8.2.2637-20.el9_1
+rpm/xz/5.2.5-8.el9_0
+rpm/xz-libs/5.2.5-8.el9_0
+rpm/yum/4.14.0-8.el9.alma.1
+rpm/zlib/1.2.11-40.el9
+
diff --git a/test/sbom/testdata/alpine-3-16-cli.txt b/test/sbom/testdata/alpine-3-16-cli.txt
new file mode 100644
index 0000000000..f33dcde9b1
--- /dev/null
+++ b/test/sbom/testdata/alpine-3-16-cli.txt
@@ -0,0 +1,15 @@
+apk/alpine-baselayout/1662926906:3.2.0-r23
+apk/alpine-baselayout-data/1662926906:3.2.0-r23
+apk/alpine-keys/1634579657:2.4-r1
+apk/apk-tools/1652592000:2.12.9-r3
+apk/busybox/1659366884:1.35.0-r17
+apk/ca-certificates-bundle/1683375144:20230506-r0
+apk/libc-utils/1585632275:0.7.2-r3
+apk/libcrypto1.1/1700454448:1.1.1w-r1
+apk/libssl1.1/1700454448:1.1.1w-r1
+apk/musl/1684510405:1.2.3-r3
+apk/musl-utils/1684510405:1.2.3-r3
+apk/scanelf/1651005390:1.3.4-r0
+apk/ssl_client/1659366884:1.35.0-r17
+apk/zlib/1660030129:1.2.12-r3
+
diff --git a/test/sbom/testdata/alpine-3-17-cli.txt b/test/sbom/testdata/alpine-3-17-cli.txt
new file mode 100644
index 0000000000..486ec41f45
--- /dev/null
+++ b/test/sbom/testdata/alpine-3-17-cli.txt
@@ -0,0 +1,16 @@
+apk/alpine-baselayout/1667573027:3.4.0-r0
+apk/alpine-baselayout-data/1667573027:3.4.0-r0
+apk/alpine-keys/1634579657:2.4-r1
+apk/apk-tools/1666552494:2.12.10-r1
+apk/busybox/1668852790:1.35.0-r29
+apk/busybox-binsh/1668852790:1.35.0-r29
+apk/ca-certificates-bundle/1683375249:20230506-r0
+apk/libc-utils/1585632275:0.7.2-r3
+apk/libcrypto3/1706234016:3.0.12-r4
+apk/libssl3/1706234016:3.0.12-r4
+apk/musl/1684510151:1.2.3-r5
+apk/musl-utils/1684510151:1.2.3-r5
+apk/scanelf/1663454964:1.3.5-r1
+apk/ssl_client/1668852790:1.35.0-r29
+apk/zlib/1665698043:1.2.13-r0
+
diff --git a/test/sbom/testdata/alpine-3-18-cli.txt b/test/sbom/testdata/alpine-3-18-cli.txt
new file mode 100644
index 0000000000..1f235d611b
--- /dev/null
+++ b/test/sbom/testdata/alpine-3-18-cli.txt
@@ -0,0 +1,16 @@
+apk/alpine-baselayout/1683642107:3.4.3-r1
+apk/alpine-baselayout-data/1683642107:3.4.3-r1
+apk/alpine-keys/1634579657:2.4-r1
+apk/apk-tools/1683727230:2.14.0-r2
+apk/busybox/1699270344:1.36.1-r5
+apk/busybox-binsh/1699270344:1.36.1-r5
+apk/ca-certificates-bundle/1683374901:20230506-r0
+apk/libc-utils/1682166293:0.7.2-r5
+apk/libcrypto3/1706233971:3.1.4-r5
+apk/libssl3/1706233971:3.1.4-r5
+apk/musl/1696584653:1.2.4-r2
+apk/musl-utils/1696584653:1.2.4-r2
+apk/scanelf/1681228881:1.3.7-r1
+apk/ssl_client/1699270344:1.36.1-r5
+apk/zlib/1681228881:1.2.13-r1
+
diff --git a/test/sbom/testdata/alpine-3-19-cli.txt b/test/sbom/testdata/alpine-3-19-cli.txt
new file mode 100644
index 0000000000..ccf702b68d
--- /dev/null
+++ b/test/sbom/testdata/alpine-3-19-cli.txt
@@ -0,0 +1,16 @@
+apk/alpine-baselayout/1695795276:3.4.3-r2
+apk/alpine-baselayout-data/1695795276:3.4.3-r2
+apk/alpine-keys/1634579657:2.4-r1
+apk/apk-tools/1684120357:2.14.0-r5
+apk/busybox/1699383189:1.36.1-r15
+apk/busybox-binsh/1699383189:1.36.1-r15
+apk/ca-certificates-bundle/1683374901:20230506-r0
+apk/libc-utils/1682166293:0.7.2-r5
+apk/libcrypto3/1706233893:3.1.4-r5
+apk/libssl3/1706233893:3.1.4-r5
+apk/musl/1699271358:1.2.4_git20230717-r4
+apk/musl-utils/1699271358:1.2.4_git20230717-r4
+apk/scanelf/1687178519:1.3.7-r2
+apk/ssl_client/1699383189:1.36.1-r15
+apk/zlib/1706012658:1.3.1-r0
+
diff --git a/test/sbom/testdata/amazonlinux-2-cli.txt b/test/sbom/testdata/amazonlinux-2-cli.txt
new file mode 100644
index 0000000000..9d4204c901
--- /dev/null
+++ b/test/sbom/testdata/amazonlinux-2-cli.txt
@@ -0,0 +1,118 @@
+rpm/amazon-linux-extras/2.0.3-1.amzn2
+pypi/amazon-linux-extras/2.0.3 /usr/lib/python2.7/site-packages/amazon_linux_extras-2.0.3-py2.7.egg-info/PKG-INFO
+pypi/amazon-linux-extras/2.0.3 /usr/lib/python2.7/site-packages/amazon_linux_extras-2.0.3-py2.7.egg-info/PKG-INFO
+rpm/basesystem/10.0-7.amzn2.0.1
+rpm/bash/4.2.46-34.amzn2
+rpm/bzip2-libs/1.0.6-13.amzn2.0.3
+rpm/ca-certificates/2023.2.62-1.amzn2.0.1
+rpm/chkconfig/1.7.4-1.amzn2.0.2
+rpm/coreutils/8.22-24.amzn2
+rpm/cpio/2.12-11.amzn2
+rpm/curl/8.3.0-1.amzn2.0.5
+rpm/cyrus-sasl-lib/2.1.26-24.amzn2
+rpm/diffutils/3.3-5.amzn2
+rpm/elfutils-libelf/0.176-2.amzn2.0.2
+rpm/expat/2.1.0-15.amzn2.0.3
+rpm/file-libs/5.11-36.amzn2.0.1
+rpm/filesystem/3.2-25.amzn2.0.4
+rpm/findutils/1:4.5.11-6.amzn2
+rpm/gawk/4.0.2-4.amzn2.1.3
+rpm/gdbm/1:1.13-6.amzn2.0.2
+rpm/glib2/2.56.1-9.amzn2.0.6
+rpm/glibc/2.26-63.amzn2.0.1
+rpm/glibc-common/2.26-63.amzn2.0.1
+rpm/glibc-langpack-en/2.26-63.amzn2.0.1
+rpm/glibc-minimal-langpack/2.26-63.amzn2.0.1
+rpm/gmp/1:6.0.0-15.amzn2.0.3
+rpm/gnupg2/2.0.22-5.amzn2.0.5
+rpm/gpg-pubkey/c87f5b1a-593863f8
+rpm/gpgme/1.3.2-5.amzn2.0.2
+rpm/grep/2.20-3.amzn2.0.2
+rpm/info/5.1-5.amzn2
+pypi/iniparse/0.4 /usr/lib/python2.7/site-packages/iniparse-0.4-py2.7.egg-info
+pypi/iniparse/0.4 /usr/lib/python2.7/site-packages/iniparse-0.4-py2.7.egg-info
+rpm/keyutils-libs/1.5.8-3.amzn2.0.2
+rpm/krb5-libs/1.15.1-55.amzn2.2.6
+rpm/libacl/2.2.51-14.amzn2
+rpm/libassuan/2.1.0-3.amzn2.0.2
+rpm/libattr/2.4.46-12.amzn2.0.2
+rpm/libblkid/2.30.2-2.amzn2.0.11
+rpm/libcap/2.54-1.amzn2.0.2
+rpm/libcom_err/1.42.9-19.amzn2.0.1
+rpm/libcrypt/2.26-63.amzn2.0.1
+rpm/libcurl/8.3.0-1.amzn2.0.5
+rpm/libdb/5.3.21-24.amzn2.0.4
+rpm/libdb-utils/5.3.21-24.amzn2.0.4
+rpm/libffi/3.0.13-18.amzn2.0.2
+rpm/libgcc/7.3.1-17.amzn2
+rpm/libgcrypt/1.5.3-14.amzn2.0.3
+rpm/libgpg-error/1.12-3.amzn2.0.3
+rpm/libidn2/2.3.0-1.amzn2.0.3
+rpm/libmetalink/0.1.3-13.amzn2
+rpm/libmount/2.30.2-2.amzn2.0.11
+rpm/libnghttp2/1.41.0-1.amzn2.0.4
+rpm/libselinux/2.5-12.amzn2.0.2
+rpm/libsepol/2.5-10.amzn2.0.1
+rpm/libssh2/1.4.3-12.amzn2.2.6
+rpm/libstdc++/7.3.1-17.amzn2
+rpm/libtasn1/4.10-1.amzn2.0.6
+rpm/libunistring/0.9.3-9.amzn2.0.2
+rpm/libuuid/2.30.2-2.amzn2.0.11
+rpm/libverto/0.2.5-4.amzn2.0.2
+rpm/libxml2/2.9.1-6.amzn2.5.13
+rpm/lua/5.1.4-15.amzn2.0.2
+rpm/ncurses/6.0-8.20170212.amzn2.1.7
+rpm/ncurses-base/6.0-8.20170212.amzn2.1.7
+rpm/ncurses-libs/6.0-8.20170212.amzn2.1.7
+rpm/nspr/4.35.0-1.amzn2
+rpm/nss/3.90.0-2.amzn2.0.1
+rpm/nss-pem/1.0.3-5.amzn2
+rpm/nss-softokn/3.90.0-6.amzn2.0.1
+rpm/nss-softokn-freebl/3.90.0-6.amzn2.0.1
+rpm/nss-sysinit/3.90.0-2.amzn2.0.1
+rpm/nss-tools/3.90.0-2.amzn2.0.1
+rpm/nss-util/3.90.0-1.amzn2
+rpm/openldap/2.4.44-25.amzn2.0.7
+rpm/openssl-libs/1:1.0.2k-24.amzn2.0.11
+rpm/p11-kit/0.23.22-1.amzn2.0.1
+rpm/p11-kit-trust/0.23.22-1.amzn2.0.1
+rpm/pcre/8.32-17.amzn2.0.3
+rpm/pinentry/0.8.1-17.amzn2.0.2
+rpm/popt/1.13-16.amzn2.0.2
+rpm/pth/2.0.7-23.amzn2.0.2
+pypi/pycurl/7.19.0 /usr/lib64/python2.7/site-packages/pycurl-7.19.0-py2.7.egg-info
+rpm/pygpgme/0.3-9.amzn2.0.3
+pypi/pygpgme/0.3 /usr/lib64/python2.7/site-packages/pygpgme-0.3-py2.7.egg-info
+rpm/pyliblzma/0.5.3-25.amzn2
+pypi/pyliblzma/0.5.3 /usr/lib64/python2.7/site-packages/pyliblzma-0.5.3-py2.7.egg-info/PKG-INFO
+rpm/python/2.7.18-1.amzn2.0.8
+rpm/python-iniparse/0.4-9.amzn2
+rpm/python-libs/2.7.18-1.amzn2.0.8
+rpm/python-pycurl/7.19.0-19.amzn2.0.2
+rpm/python-urlgrabber/3.10-9.amzn2.0.1
+rpm/python2-rpm/4.11.3-48.amzn2.0.3
+rpm/pyxattr/0.5.1-5.amzn2.0.2
+pypi/pyxattr/0.5.1 /usr/lib64/python2.7/site-packages/pyxattr-0.5.1-py2.7.egg-info/PKG-INFO
+rpm/readline/6.2-10.amzn2.0.2
+rpm/rpm/4.11.3-48.amzn2.0.3
+rpm/rpm-build-libs/4.11.3-48.amzn2.0.3
+rpm/rpm-libs/4.11.3-48.amzn2.0.3
+pypi/rpm-python/4.11.3 /usr/lib64/python2.7/site-packages/rpm_python-4.11.3-py2.7.egg-info
+rpm/sed/4.2.2-5.amzn2.0.2
+rpm/setup/2.8.71-10.amzn2.0.1
+rpm/shared-mime-info/1.8-4.amzn2
+rpm/sqlite/3.7.17-8.amzn2.1.2
+rpm/system-release/1:2-16.amzn2
+rpm/tzdata/2023d-1.amzn2.0.1
+pypi/urlgrabber/3.10 /usr/lib/python2.7/site-packages/urlgrabber-3.10-py2.7.egg-info
+pypi/urlgrabber/3.10 /usr/lib/python2.7/site-packages/urlgrabber-3.10-py2.7.egg-info
+rpm/vim-data/2:9.0.2153-1.amzn2.0.1
+rpm/vim-minimal/2:9.0.2153-1.amzn2.0.1
+rpm/xz-libs/5.2.2-1.amzn2.0.3
+rpm/yum/3.4.3-158.amzn2.0.7
+rpm/yum-metadata-parser/1.1.4-10.amzn2.0.2
+pypi/yum-metadata-parser/1.1.4 /usr/lib64/python2.7/site-packages/yum_metadata_parser-1.1.4-py2.7.egg-info
+rpm/yum-plugin-ovl/1.1.31-46.amzn2.0.1
+rpm/yum-plugin-priorities/1.1.31-46.amzn2.0.1
+rpm/zlib/1.2.7-19.amzn2.0.3
+
diff --git a/test/sbom/testdata/amazonlinux-2023-cli.txt b/test/sbom/testdata/amazonlinux-2023-cli.txt
new file mode 100644
index 0000000000..59632ade65
--- /dev/null
+++ b/test/sbom/testdata/amazonlinux-2023-cli.txt
@@ -0,0 +1,107 @@
+rpm/alternatives/1.15-2.amzn2023.0.2
+rpm/amazon-linux-repo-cdn/2023.3.20240131-0.amzn2023
+rpm/audit-libs/3.0.6-1.amzn2023.0.2
+rpm/basesystem/11-11.amzn2023.0.2
+rpm/bash/5.2.15-1.amzn2023.0.2
+rpm/bzip2-libs/1.0.8-6.amzn2023.0.2
+rpm/ca-certificates/2023.2.62-1.0.amzn2023.0.1
+rpm/coreutils-single/8.32-30.amzn2023.0.3
+rpm/crypto-policies/20220428-1.gitdfb10ea.amzn2023.0.2
+rpm/curl-minimal/8.5.0-1.amzn2023.0.1
+rpm/dnf/4.12.0-2.amzn2023.0.4
+rpm/dnf-data/4.12.0-2.amzn2023.0.4
+rpm/elfutils-default-yama-scope/0.188-3.amzn2023.0.2
+rpm/elfutils-libelf/0.188-3.amzn2023.0.2
+rpm/elfutils-libs/0.188-3.amzn2023.0.2
+rpm/expat/2.5.0-1.amzn2023.0.2
+rpm/file-libs/5.39-7.amzn2023.0.4
+rpm/filesystem/3.14-5.amzn2023.0.3
+rpm/gawk/5.1.0-3.amzn2023.0.3
+rpm/gdbm-libs/1:1.19-2.amzn2023.0.2
+rpm/glib2/2.74.7-689.amzn2023.0.2
+rpm/glibc/2.34-52.amzn2023.0.7
+rpm/glibc-common/2.34-52.amzn2023.0.7
+rpm/glibc-minimal-langpack/2.34-52.amzn2023.0.7
+rpm/gmp/1:6.2.1-2.amzn2023.0.2
+rpm/gnupg2-minimal/2.3.7-1.amzn2023.0.4
+pypi/gpg/1.15.1 /usr/lib64/python3.9/site-packages/gpg-1.15.1-py3.9.egg-info
+rpm/gpg-pubkey/d832c631-6515c85e
+rpm/gpgme/1.15.1-6.amzn2023.0.3
+rpm/grep/3.8-1.amzn2023.0.4
+rpm/json-c/0.14-8.amzn2023.0.2
+rpm/keyutils-libs/1.6.3-1.amzn2023.0.1
+rpm/krb5-libs/1.21-3.amzn2023.0.3
+rpm/libacl/2.3.1-2.amzn2023.0.2
+rpm/libarchive/3.5.3-2.amzn2023.0.3
+rpm/libassuan/2.5.5-1.amzn2023.0.2
+rpm/libattr/2.5.1-3.amzn2023.0.2
+rpm/libblkid/2.37.4-1.amzn2023.0.3
+rpm/libcap/2.48-2.amzn2023.0.3
+rpm/libcap-ng/0.8.2-4.amzn2023.0.2
+rpm/libcom_err/1.46.5-2.amzn2023.0.2
+rpm/libcomps/0.1.18-1.amzn2023.0.2
+pypi/libcomps/0.1.18 /usr/lib64/python3.9/site-packages/libcomps-0.1.18-py3.9.egg-info/PKG-INFO
+rpm/libcurl-minimal/8.5.0-1.amzn2023.0.1
+rpm/libdnf/0.67.0-1.amzn2023.0.5
+rpm/libffi/3.4.4-1.amzn2023.0.1
+rpm/libgcc/11.4.1-2.amzn2023.0.2
+rpm/libgcrypt/1.10.2-1.amzn2023.0.1
+rpm/libgomp/11.4.1-2.amzn2023.0.2
+rpm/libgpg-error/1.42-1.amzn2023.0.2
+rpm/libidn2/2.3.2-1.amzn2023.0.5
+rpm/libmodulemd/2.13.0-2.amzn2023.0.2
+rpm/libmount/2.37.4-1.amzn2023.0.3
+rpm/libnghttp2/1.57.0-1.amzn2023.0.1
+rpm/librepo/1.14.2-1.amzn2023.0.4
+rpm/libreport-filesystem/2.15.2-2.amzn2023.0.2
+rpm/libselinux/3.4-5.amzn2023.0.2
+rpm/libsepol/3.4-3.amzn2023.0.3
+rpm/libsigsegv/2.13-2.amzn2023.0.2
+rpm/libsmartcols/2.37.4-1.amzn2023.0.3
+rpm/libsolv/0.7.22-1.amzn2023.0.2
+rpm/libstdc++/11.4.1-2.amzn2023.0.2
+rpm/libtasn1/4.19.0-1.amzn2023.0.4
+rpm/libunistring/0.9.10-10.amzn2023.0.2
+rpm/libuuid/2.37.4-1.amzn2023.0.3
+rpm/libverto/0.3.2-1.amzn2023.0.2
+rpm/libxcrypt/4.4.33-7.amzn2023
+rpm/libxml2/2.10.4-1.amzn2023.0.6
+rpm/libyaml/0.2.5-5.amzn2023.0.2
+rpm/libzstd/1.5.5-1.amzn2023.0.1
+rpm/lua-libs/5.4.4-3.amzn2023.0.2
+rpm/lz4-libs/1.9.4-1.amzn2023.0.2
+rpm/mpfr/4.1.0-7.amzn2023.0.2
+rpm/ncurses-base/6.2-4.20200222.amzn2023.0.5
+rpm/ncurses-libs/6.2-4.20200222.amzn2023.0.5
+rpm/npth/1.6-6.amzn2023.0.2
+rpm/openssl-libs/1:3.0.8-1.amzn2023.0.10
+rpm/p11-kit/0.24.1-2.amzn2023.0.3
+rpm/p11-kit-trust/0.24.1-2.amzn2023.0.3
+rpm/pcre2/10.40-1.amzn2023.0.3
+rpm/pcre2-syntax/10.40-1.amzn2023.0.3
+rpm/popt/1.18-6.amzn2023.0.2
+rpm/python3/3.9.16-1.amzn2023.0.6
+rpm/python3-dnf/4.12.0-2.amzn2023.0.4
+rpm/python3-gpg/1.15.1-6.amzn2023.0.3
+rpm/python3-hawkey/0.67.0-1.amzn2023.0.5
+rpm/python3-libcomps/0.1.18-1.amzn2023.0.2
+rpm/python3-libdnf/0.67.0-1.amzn2023.0.5
+rpm/python3-libs/3.9.16-1.amzn2023.0.6
+rpm/python3-pip-wheel/21.3.1-2.amzn2023.0.7
+rpm/python3-rpm/4.16.1.3-12.amzn2023.0.6
+rpm/python3-setuptools-wheel/59.6.0-2.amzn2023.0.4
+rpm/readline/8.1-2.amzn2023.0.2
+rpm/rpm/4.16.1.3-12.amzn2023.0.6
+pypi/rpm/4.16.1.3 /usr/lib64/python3.9/site-packages/rpm-4.16.1.3-py3.9.egg-info
+rpm/rpm-build-libs/4.16.1.3-12.amzn2023.0.6
+rpm/rpm-libs/4.16.1.3-12.amzn2023.0.6
+rpm/rpm-sign-libs/4.16.1.3-12.amzn2023.0.6
+rpm/sed/4.8-7.amzn2023.0.2
+rpm/setup/2.13.7-3.amzn2023.0.2
+rpm/sqlite-libs/3.40.0-1.amzn2023.0.4
+rpm/system-release/2023.3.20240131-0.amzn2023
+rpm/tzdata/2023d-1.amzn2023.0.1
+rpm/xz-libs/5.2.5-9.amzn2023.0.2
+rpm/yum/4.12.0-2.amzn2023.0.4
+rpm/zlib/1.2.11-33.amzn2023.0.5
+
diff --git a/test/sbom/testdata/centos-7-cli.txt b/test/sbom/testdata/centos-7-cli.txt
new file mode 100644
index 0000000000..0b763ddcb5
--- /dev/null
+++ b/test/sbom/testdata/centos-7-cli.txt
@@ -0,0 +1,166 @@
+pypi/PyGObject/3.22.0 /usr/lib64/python2.7/site-packages/pygobject-3.22.0-py2.7-linux-aarch64.egg-info
+rpm/acl/2.2.51-15.el7
+rpm/audit-libs/2.8.5-4.el7
+rpm/basesystem/10.0-7.el7.centos
+rpm/bash/4.2.46-34.el7
+rpm/bc/1.06.95-13.el7
+rpm/bind-license/32:9.11.4-26.P2.el7
+rpm/binutils/2.27-44.base.el7
+rpm/bzip2-libs/1.0.6-13.el7
+rpm/ca-certificates/2020.2.41-70.0.el7_8
+rpm/centos-release/7-9.2009.0.el7.centos
+pypi/chardet/2.2.1 /usr/lib/python2.7/site-packages/chardet-2.2.1-py2.7.egg-info/PKG-INFO
+pypi/chardet/2.2.1 /usr/lib/python2.7/site-packages/chardet-2.2.1-py2.7.egg-info/PKG-INFO
+rpm/chkconfig/1.7.6-1.el7
+rpm/coreutils/8.22-24.el7
+rpm/cpio/2.11-28.el7
+rpm/cracklib/2.9.0-11.el7
+rpm/cracklib-dicts/2.9.0-11.el7
+rpm/cryptsetup-libs/2.0.3-6.el7
+rpm/curl/7.29.0-59.el7
+rpm/cyrus-sasl-lib/2.1.26-23.el7
+rpm/dbus/1:1.10.24-15.el7
+rpm/dbus-glib/0.100-7.el7
+rpm/dbus-libs/1:1.10.24-15.el7
+rpm/dbus-python/1.1.1-9.el7
+rpm/device-mapper/7:1.02.170-6.el7
+rpm/device-mapper-libs/7:1.02.170-6.el7
+rpm/diffutils/3.3-5.el7
+rpm/dracut/033-572.el7
+rpm/elfutils-default-yama-scope/0.176-5.el7
+rpm/elfutils-libelf/0.176-5.el7
+rpm/elfutils-libs/0.176-5.el7
+rpm/expat/2.1.0-12.el7
+rpm/file-libs/5.11-37.el7
+rpm/filesystem/3.2-25.el7
+rpm/findutils/1:4.5.11-6.el7
+rpm/gawk/4.0.2-4.el7_3.1
+rpm/gdbm/1.10-8.el7
+rpm/geoipupdate/2.5.0-1.el7
+rpm/glib2/2.56.1-7.el7
+rpm/glibc/2.17-317.el7
+rpm/glibc-common/2.17-317.el7
+rpm/gmp/1:6.0.0-15.el7
+rpm/gnupg2/2.0.22-5.el7_5
+rpm/gobject-introspection/1.56.1-1.el7
+rpm/gpgme/1.3.2-5.el7
+rpm/grep/2.20-3.el7
+rpm/gzip/1.5-10.el7
+rpm/hardlink/1:1.0-19.el7
+rpm/hostname/3.13-3.el7_7.1
+rpm/info/5.1-5.el7
+pypi/iniparse/0.4 /usr/lib/python2.7/site-packages/iniparse-0.4-py2.7.egg-info
+pypi/iniparse/0.4 /usr/lib/python2.7/site-packages/iniparse-0.4-py2.7.egg-info
+rpm/iputils/20160308-10.el7
+rpm/json-c/0.11-4.el7_0
+rpm/kernel-core/4.18.0-193.28.1.el7
+rpm/kernel-modules/4.18.0-193.28.1.el7
+rpm/keyutils-libs/1.5.8-3.el7
+pypi/kitchen/1.1.1 /usr/lib/python2.7/site-packages/kitchen-1.1.1-py2.7.egg-info/PKG-INFO
+pypi/kitchen/1.1.1 /usr/lib/python2.7/site-packages/kitchen-1.1.1-py2.7.egg-info/PKG-INFO
+rpm/kmod/20-28.el7
+rpm/kmod-libs/20-28.el7
+rpm/kpartx/0.4.9-133.el7
+rpm/krb5-libs/1.15.1-50.el7
+rpm/libacl/2.2.51-15.el7
+rpm/libassuan/2.1.0-3.el7
+rpm/libattr/2.4.46-13.el7
+rpm/libblkid/2.23.2-65.el7
+rpm/libcap/2.22-11.el7
+rpm/libcap-ng/0.7.5-4.el7
+rpm/libcom_err/1.42.9-19.el7
+rpm/libcurl/7.29.0-59.el7
+rpm/libdb/5.3.21-25.el7
+rpm/libdb-utils/5.3.21-25.el7
+rpm/libffi/3.0.13-19.el7
+rpm/libgcc/4.8.5-44.el7
+rpm/libgcrypt/1.5.3-14.el7
+rpm/libgpg-error/1.12-3.el7
+rpm/libidn/1.28-4.el7
+rpm/libmount/2.23.2-65.el7
+rpm/libpwquality/1.2.3-5.el7
+rpm/libselinux/2.5-15.el7
+rpm/libsemanage/2.5-14.el7
+rpm/libsepol/2.5-10.el7
+rpm/libsmartcols/2.23.2-65.el7
+rpm/libssh2/1.8.0-4.el7
+rpm/libstdc++/4.8.5-44.el7
+rpm/libtasn1/4.10-1.el7
+rpm/libuser/0.60-9.el7
+rpm/libutempter/1.1.6-4.el7
+rpm/libuuid/2.23.2-65.el7
+rpm/libverto/0.2.5-4.el7
+rpm/libxml2/2.9.1-6.el7.5
+rpm/libxml2-python/2.9.1-6.el7.5
+rpm/lua/5.1.4-15.el7
+rpm/lz4/1.8.3-1.el7
+rpm/ncurses/5.9-14.20130511.el7_4
+rpm/ncurses-base/5.9-14.20130511.el7_4
+rpm/ncurses-libs/5.9-14.20130511.el7_4
+rpm/nspr/4.25.0-2.el7_9
+rpm/nss/3.53.1-3.el7_9
+rpm/nss-pem/1.0.3-7.el7
+rpm/nss-softokn/3.53.1-6.el7_9
+rpm/nss-softokn-freebl/3.53.1-6.el7_9
+rpm/nss-sysinit/3.53.1-3.el7_9
+rpm/nss-tools/3.53.1-3.el7_9
+rpm/nss-util/3.53.1-1.el7_9
+rpm/openldap/2.4.44-22.el7
+rpm/openssl-libs/1:1.0.2k-19.el7
+rpm/p11-kit/0.23.5-3.el7
+rpm/p11-kit-trust/0.23.5-3.el7
+rpm/pam/1.1.8-23.el7
+rpm/passwd/0.79-6.el7
+rpm/pcre/8.32-17.el7
+rpm/pinentry/0.8.1-17.el7
+rpm/pkgconfig/1:0.27.1-4.el7
+rpm/popt/1.13-16.el7
+rpm/procps-ng/3.3.10-28.el7
+rpm/pth/2.0.7-23.el7
+pypi/pycurl/7.19.0 /usr/lib64/python2.7/site-packages/pycurl-7.19.0-py2.7.egg-info
+rpm/pygpgme/0.3-9.el7
+pypi/pygpgme/0.3 /usr/lib64/python2.7/site-packages/pygpgme-0.3-py2.7.egg-info
+rpm/pyliblzma/0.5.3-11.el7
+pypi/pyliblzma/0.5.3 /usr/lib64/python2.7/site-packages/pyliblzma-0.5.3-py2.7.egg-info/PKG-INFO
+rpm/python/2.7.5-89.el7
+rpm/python-chardet/2.2.1-3.el7
+rpm/python-gobject-base/3.22.0-1.el7_4.1
+rpm/python-iniparse/0.4-9.el7
+rpm/python-kitchen/1.1.1-5.el7
+rpm/python-libs/2.7.5-89.el7
+rpm/python-pycurl/7.19.0-19.el7
+rpm/python-urlgrabber/3.10-10.el7
+rpm/pyxattr/0.5.1-5.el7
+pypi/pyxattr/0.5.1 /usr/lib64/python2.7/site-packages/pyxattr-0.5.1-py2.7.egg-info/PKG-INFO
+rpm/qemu-guest-agent/10:2.12.0-3.el7
+rpm/qrencode-libs/3.4.1-3.el7
+rpm/readline/6.2-11.el7
+rpm/rootfiles/8.1-11.el7
+rpm/rpm/4.11.3-45.el7
+rpm/rpm-build-libs/4.11.3-45.el7
+rpm/rpm-libs/4.11.3-45.el7
+rpm/rpm-python/4.11.3-45.el7
+rpm/sed/4.2.2-7.el7
+rpm/setup/2.8.71-11.el7
+rpm/shadow-utils/2:4.6-5.el7
+rpm/shared-mime-info/1.8-5.el7
+rpm/sqlite/3.7.17-8.el7_7.1
+rpm/systemd/219-78.el7
+rpm/systemd-libs/219-78.el7
+rpm/tar/2:1.26-35.el7
+rpm/tzdata/2020d-2.el7
+pypi/urlgrabber/3.10 /usr/lib/python2.7/site-packages/urlgrabber-3.10-py2.7.egg-info
+pypi/urlgrabber/3.10 /usr/lib/python2.7/site-packages/urlgrabber-3.10-py2.7.egg-info
+rpm/ustr/1.0.4-16.el7
+rpm/util-linux/2.23.2-65.el7
+rpm/vim-minimal/2:7.4.629-7.el7
+rpm/xz/5.2.2-1.el7
+rpm/xz-libs/5.2.2-1.el7
+rpm/yum/3.4.3-168.el7.centos
+rpm/yum-metadata-parser/1.1.4-10.el7
+pypi/yum-metadata-parser/1.1.4 /usr/lib64/python2.7/site-packages/yum_metadata_parser-1.1.4-py2.7.egg-info
+rpm/yum-plugin-fastestmirror/1.1.31-54.el7_8
+rpm/yum-plugin-ovl/1.1.31-54.el7_8
+rpm/yum-utils/1.1.31-54.el7_8
+rpm/zlib/1.2.7-18.el7
+
diff --git a/test/sbom/testdata/centos-8-cli.txt b/test/sbom/testdata/centos-8-cli.txt
new file mode 100644
index 0000000000..08a115859b
--- /dev/null
+++ b/test/sbom/testdata/centos-8-cli.txt
@@ -0,0 +1,185 @@
+rpm/acl/2.2.53-1.el8
+rpm/audit-libs/3.0-0.17.20191104git1c2f876.el8
+rpm/basesystem/11-5.el8
+rpm/bash/4.4.19-14.el8
+rpm/bind-export-libs/32:9.11.26-3.el8
+rpm/binutils/2.30-93.el8
+rpm/bzip2-libs/1.0.6-26.el8
+rpm/ca-certificates/2020.2.41-80.0.el8_2
+rpm/centos-gpg-keys/1:8-2.el8
+rpm/centos-linux-release/8.4-1.2105.el8
+rpm/centos-linux-repos/8-2.el8
+rpm/chkconfig/1.13-2.el8
+rpm/coreutils-single/8.30-8.el8
+rpm/cpio/2.12-10.el8
+rpm/cracklib/2.9.6-15.el8
+rpm/cracklib-dicts/2.9.6-15.el8
+rpm/crypto-policies/20210209-1.gitbfb6bed.el8_3
+rpm/cryptsetup-libs/2.3.3-4.el8
+rpm/curl/7.61.1-18.el8
+rpm/cyrus-sasl-lib/2.1.27-5.el8
+rpm/dbus/1:1.12.8-12.el8
+rpm/dbus-common/1:1.12.8-12.el8
+rpm/dbus-daemon/1:1.12.8-12.el8
+rpm/dbus-libs/1:1.12.8-12.el8
+rpm/dbus-tools/1:1.12.8-12.el8
+rpm/device-mapper/8:1.02.175-5.el8
+rpm/device-mapper-libs/8:1.02.175-5.el8
+rpm/dhcp-client/12:4.3.6-44.0.1.el8
+rpm/dhcp-common/12:4.3.6-44.0.1.el8
+rpm/dhcp-libs/12:4.3.6-44.0.1.el8
+rpm/dnf/4.4.2-11.el8
+rpm/dnf-data/4.4.2-11.el8
+rpm/dracut/049-135.git20210121.el8
+rpm/dracut-network/049-135.git20210121.el8
+rpm/dracut-squash/049-135.git20210121.el8
+rpm/elfutils-default-yama-scope/0.182-3.el8
+rpm/elfutils-libelf/0.182-3.el8
+rpm/elfutils-libs/0.182-3.el8
+rpm/ethtool/2:5.8-5.el8
+rpm/expat/2.2.5-4.el8
+rpm/file-libs/5.33-16.el8_3.1
+rpm/filesystem/3.8-3.el8
+rpm/findutils/1:4.6.0-20.el8
+rpm/gawk/4.2.1-2.el8
+rpm/gdbm/1:1.18-1.el8
+rpm/gdbm-libs/1:1.18-1.el8
+rpm/glib2/2.56.4-9.el8
+rpm/glibc/2.28-151.el8
+rpm/glibc-common/2.28-151.el8
+rpm/glibc-minimal-langpack/2.28-151.el8
+rpm/gmp/1:6.1.2-10.el8
+rpm/gnupg2/2.2.20-2.el8
+rpm/gnutls/3.6.14-7.el8_3
+pypi/gpg/1.13.1 /usr/lib64/python3.6/site-packages/gpg-1.13.1-py3.6.egg-info
+rpm/gpgme/1.13.1-7.el8
+rpm/grep/3.1-6.el8
+rpm/gzip/1.9-12.el8
+rpm/hostname/3.20-6.el8
+rpm/hwdata/0.314-8.8.el8
+rpm/ima-evm-utils/1.3.2-12.el8
+rpm/info/6.5-6.el8
+rpm/ipcalc/0.2.4-4.el8
+rpm/iproute/5.9.0-4.el8
+rpm/iptables-libs/1.8.4-17.el8
+rpm/iputils/20180629-7.el8
+rpm/json-c/0.13.1-0.4.el8
+rpm/kexec-tools/2.0.20-46.el8
+rpm/keyutils-libs/1.5.10-6.el8
+rpm/kmod/25-17.el8
+rpm/kmod-libs/25-17.el8
+rpm/krb5-libs/1.18.2-8.el8
+rpm/langpacks-en/1.0-12.el8
+rpm/less/530-1.el8
+rpm/libacl/2.2.53-1.el8
+rpm/libarchive/3.3.3-1.el8
+rpm/libassuan/2.5.1-3.el8
+rpm/libattr/2.4.48-3.el8
+rpm/libblkid/2.32.1-27.el8
+rpm/libcap/2.26-4.el8
+rpm/libcap-ng/0.7.9-5.el8
+rpm/libcom_err/1.45.6-1.el8
+rpm/libcomps/0.1.11-5.el8
+rpm/libcurl-minimal/7.61.1-18.el8
+rpm/libdb/5.3.28-40.el8
+rpm/libdb-utils/5.3.28-40.el8
+rpm/libdnf/0.55.0-7.el8
+rpm/libfdisk/2.32.1-27.el8
+rpm/libffi/3.1-22.el8
+rpm/libgcc/8.4.1-1.el8
+rpm/libgcrypt/1.8.5-4.el8
+rpm/libgpg-error/1.31-1.el8
+rpm/libibverbs/32.0-4.el8
+rpm/libidn2/2.2.0-1.el8
+rpm/libkcapi/1.2.0-2.el8
+rpm/libkcapi-hmaccalc/1.2.0-2.el8
+rpm/libksba/1.3.5-7.el8
+rpm/libmetalink/0.1.3-7.el8
+rpm/libmnl/1.0.4-6.el8
+rpm/libmodulemd/2.9.4-2.el8
+rpm/libmount/2.32.1-27.el8
+rpm/libnghttp2/1.33.0-3.el8_2.1
+rpm/libnl3/3.5.0-1.el8
+rpm/libnsl2/1.2.0-2.20180605git4a062cf.el8
+rpm/libpcap/14:1.9.1-5.el8
+rpm/libpwquality/1.4.4-3.el8
+rpm/librepo/1.12.0-3.el8
+rpm/libreport-filesystem/2.9.5-15.el8
+rpm/libseccomp/2.5.1-1.el8
+rpm/libselinux/2.9-5.el8
+rpm/libsemanage/2.9-6.el8
+rpm/libsepol/2.9-2.el8
+rpm/libsigsegv/2.11-5.el8
+rpm/libsmartcols/2.32.1-27.el8
+rpm/libsolv/0.7.16-2.el8
+rpm/libstdc++/8.4.1-1.el8
+rpm/libtasn1/4.13-3.el8
+rpm/libtirpc/1.1.4-4.el8
+rpm/libunistring/0.9.9-3.el8
+rpm/libusbx/1.0.23-4.el8
+rpm/libutempter/1.1.6-14.el8
+rpm/libuuid/2.32.1-27.el8
+rpm/libverto/0.3.0-5.el8
+rpm/libxcrypt/4.1.1-4.el8
+rpm/libxml2/2.9.7-9.el8
+rpm/libyaml/0.1.7-5.el8
+rpm/libzstd/1.4.4-1.el8
+rpm/lua-libs/5.3.4-11.el8
+rpm/lz4-libs/1.8.3-2.el8
+rpm/lzo/2.08-14.el8
+rpm/mpfr/3.1.6-1.el8
+rpm/ncurses-base/6.1-7.20180224.el8
+rpm/ncurses-libs/6.1-7.20180224.el8
+rpm/nettle/3.4.1-2.el8
+rpm/npth/1.5-4.el8
+rpm/openldap/2.4.46-16.el8
+rpm/openssl-libs/1:1.1.1g-15.el8_3
+rpm/p11-kit/0.23.22-1.el8
+rpm/p11-kit-trust/0.23.22-1.el8
+rpm/pam/1.3.1-14.el8
+rpm/pciutils/3.7.0-1.el8
+rpm/pciutils-libs/3.7.0-1.el8
+rpm/pcre/8.42-4.el8
+rpm/pcre2/10.32-2.el8
+rpm/platform-python/3.6.8-37.el8
+rpm/platform-python-setuptools/39.2.0-6.el8
+rpm/popt/1.18-1.el8
+rpm/procps-ng/3.3.15-6.el8
+rpm/python3-dnf/4.4.2-11.el8
+rpm/python3-gpg/1.13.1-7.el8
+rpm/python3-hawkey/0.55.0-7.el8
+rpm/python3-libcomps/0.1.11-5.el8
+rpm/python3-libdnf/0.55.0-7.el8
+rpm/python3-libs/3.6.8-37.el8
+rpm/python3-pip-wheel/9.0.3-19.el8
+rpm/python3-rpm/4.14.3-13.el8
+rpm/python3-setuptools-wheel/39.2.0-6.el8
+rpm/rdma-core/32.0-4.el8
+rpm/readline/7.0-10.el8
+rpm/rootfiles/8.1-22.el8
+rpm/rpm/4.14.3-13.el8
+pypi/rpm/4.14.3 /usr/lib64/python3.6/site-packages/rpm-4.14.3-py3.6.egg-info
+rpm/rpm-build-libs/4.14.3-13.el8
+rpm/rpm-libs/4.14.3-13.el8
+rpm/sed/4.5-2.el8
+rpm/setup/2.12.2-6.el8
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+rpm/shadow-utils/2:4.6-12.el8
+rpm/snappy/1.1.8-3.el8
+rpm/sqlite-libs/3.26.0-13.el8
+rpm/squashfs-tools/4.3-20.el8
+rpm/systemd/239-45.el8
+rpm/systemd-libs/239-45.el8
+rpm/systemd-pam/239-45.el8
+rpm/systemd-udev/239-45.el8
+rpm/tar/2:1.30-5.el8
+rpm/tpm2-tss/2.3.2-3.el8
+rpm/tzdata/2021a-1.el8
+rpm/util-linux/2.32.1-27.el8
+rpm/vim-minimal/2:8.0.1763-15.el8
+rpm/xz/5.2.4-3.el8
+rpm/xz-libs/5.2.4-3.el8
+rpm/yum/4.4.2-11.el8
+rpm/zlib/1.2.11-17.el8
+
diff --git a/test/sbom/testdata/debian-10-cli.txt b/test/sbom/testdata/debian-10-cli.txt
new file mode 100644
index 0000000000..fae91cebd9
--- /dev/null
+++ b/test/sbom/testdata/debian-10-cli.txt
@@ -0,0 +1,92 @@
+deb/adduser/3.118
+deb/apt/1.8.2.3
+deb/base-files/10.3+deb10u13
+deb/base-passwd/3.5.46
+deb/bash/5.0-4
+deb/bsdutils/1:2.33.1-0.1
+deb/coreutils/8.30-3
+deb/dash/0.5.10.2-5
+deb/debconf/1.5.71+deb10u1
+deb/debian-archive-keyring/2019.1+deb10u2
+deb/debianutils/4.8.6.1
+deb/diffutils/1:3.7-3
+deb/dpkg/1.19.8
+deb/e2fsprogs/1.44.5-1+deb10u3
+deb/fdisk/2.33.1-0.1
+deb/findutils/4.6.0+git+20190209-2
+deb/gcc-8-base/8.3.0-6
+deb/gpgv/2.2.12-1+deb10u2
+deb/grep/3.3-1
+deb/gzip/1.9-3+deb10u1
+deb/hostname/3.21
+deb/init-system-helpers/1.56+nmu1
+deb/iproute2/4.20.0-2+deb10u1
+deb/iputils-ping/3:20180629-2+deb10u2
+deb/libacl1/2.2.53-4
+deb/libapt-pkg5.0/1.8.2.3
+deb/libattr1/1:2.4.48-4
+deb/libaudit-common/1:2.8.4-3
+deb/libaudit1/1:2.8.4-3
+deb/libblkid1/2.33.1-0.1
+deb/libbz2-1.0/1.0.6-9.2~deb10u2
+deb/libc-bin/2.28-10+deb10u2
+deb/libc6/2.28-10+deb10u2
+deb/libcap-ng0/0.7.9-2
+deb/libcap2/1:2.25-2
+deb/libcap2-bin/1:2.25-2
+deb/libcom-err2/1.44.5-1+deb10u3
+deb/libdb5.3/5.3.28+dfsg1-0.5
+deb/libdebconfclient0/0.249
+deb/libelf1/0.176-1.1+deb10u1
+deb/libext2fs2/1.44.5-1+deb10u3
+deb/libfdisk1/2.33.1-0.1
+deb/libffi6/3.2.1-9
+deb/libgcc1/1:8.3.0-6
+deb/libgcrypt20/1.8.4-5+deb10u1
+deb/libgmp10/2:6.1.2+dfsg-4+deb10u1
+deb/libgnutls30/3.6.7-4+deb10u11
+deb/libgpg-error0/1.35-1
+deb/libhogweed4/3.4.1-1+deb10u1
+deb/libidn2-0/2.0.5-1+deb10u1
+deb/liblz4-1/1.8.3-1+deb10u1
+deb/liblzma5/5.2.4-1+deb10u1
+deb/libmnl0/1.0.4-2
+deb/libmount1/2.33.1-0.1
+deb/libncursesw6/6.1+20181013-2+deb10u5
+deb/libnettle6/3.4.1-1+deb10u1
+deb/libp11-kit0/0.23.15-2+deb10u1
+deb/libpam-modules/1.3.1-5
+deb/libpam-modules-bin/1.3.1-5
+deb/libpam-runtime/1.3.1-5
+deb/libpam0g/1.3.1-5
+deb/libpcre3/2:8.39-12
+deb/libseccomp2/2.3.3-4
+deb/libselinux1/2.8-1+b1
+deb/libsemanage-common/2.8-2
+deb/libsemanage1/2.8-2
+deb/libsepol1/2.8-1
+deb/libsmartcols1/2.33.1-0.1
+deb/libss2/1.44.5-1+deb10u3
+deb/libstdc++6/8.3.0-6
+deb/libsystemd0/241-7~deb10u10
+deb/libtasn1-6/4.13-3+deb10u1
+deb/libtinfo6/6.1+20181013-2+deb10u5
+deb/libudev1/241-7~deb10u10
+deb/libunistring2/0.9.10-1
+deb/libuuid1/2.33.1-0.1
+deb/libxtables12/1.8.2-4
+deb/libzstd1/1.3.8+dfsg-3+deb10u2
+deb/login/1:4.5-1.1
+deb/mawk/1.3.3-17+b3
+deb/mount/2.33.1-0.1
+deb/ncurses-base/6.1+20181013-2+deb10u5
+deb/ncurses-bin/6.1+20181013-2+deb10u5
+deb/passwd/1:4.5-1.1
+deb/perl-base/5.28.1-6+deb10u1
+deb/sed/4.7-1
+deb/sysvinit-utils/2.93-8
+deb/tar/1.30+dfsg-6
+deb/tzdata/2021a-0+deb10u12
+deb/util-linux/2.33.1-0.1
+deb/zlib1g/1:1.2.11.dfsg-1+deb10u2
+
diff --git a/test/sbom/testdata/debian-11-cli.txt b/test/sbom/testdata/debian-11-cli.txt
new file mode 100644
index 0000000000..8858b5b607
--- /dev/null
+++ b/test/sbom/testdata/debian-11-cli.txt
@@ -0,0 +1,97 @@
+deb/adduser/3.118+deb11u1
+deb/apt/2.2.4
+deb/base-files/11.1+deb11u9
+deb/base-passwd/3.5.51
+deb/bash/5.1-2+deb11u1
+deb/bsdutils/1:2.36.1-8+deb11u1
+deb/coreutils/8.32-4+b1
+deb/dash/0.5.11+git20200708+dd9ef66-5
+deb/debconf/1.5.77
+deb/debian-archive-keyring/2021.1.1+deb11u1
+deb/debianutils/4.11.2
+deb/diffutils/1:3.7-5
+deb/dpkg/1.20.13
+deb/e2fsprogs/1.46.2-2
+deb/findutils/4.8.0-1
+deb/gcc-10-base/10.2.1-6
+deb/gcc-9-base/9.3.0-22
+deb/gpgv/2.2.27-2+deb11u2
+deb/grep/3.6-1+deb11u1
+deb/gzip/1.10-4+deb11u1
+deb/hostname/3.23
+deb/init-system-helpers/1.60
+deb/libacl1/2.2.53-10
+deb/libapt-pkg6.0/2.2.4
+deb/libattr1/1:2.4.48-6
+deb/libaudit-common/1:3.0-2
+deb/libaudit1/1:3.0-2
+deb/libblkid1/2.36.1-8+deb11u1
+deb/libbz2-1.0/1.0.8-4
+deb/libc-bin/2.31-13+deb11u8
+deb/libc6/2.31-13+deb11u8
+deb/libcap-ng0/0.7.9-2.2+b1
+deb/libcom-err2/1.46.2-2
+deb/libcrypt1/1:4.4.18-4
+deb/libdb5.3/5.3.28+dfsg1-0.8
+deb/libdebconfclient0/0.260
+deb/libext2fs2/1.46.2-2
+deb/libffi7/3.3-6
+deb/libgcc-s1/10.2.1-6
+deb/libgcrypt20/1.8.7-6
+deb/libgmp10/2:6.2.1+dfsg-1+deb11u1
+deb/libgnutls30/3.7.1-5+deb11u4
+deb/libgpg-error0/1.38-2
+deb/libgssapi-krb5-2/1.18.3-6+deb11u4
+deb/libhogweed6/3.7.3-1
+deb/libidn2-0/2.3.0-5
+deb/libk5crypto3/1.18.3-6+deb11u4
+deb/libkeyutils1/1.6.1-2
+deb/libkrb5-3/1.18.3-6+deb11u4
+deb/libkrb5support0/1.18.3-6+deb11u4
+deb/liblz4-1/1.9.3-2
+deb/liblzma5/5.2.5-2.1~deb11u1
+deb/libmount1/2.36.1-8+deb11u1
+deb/libnettle8/3.7.3-1
+deb/libnsl2/1.3.0-2
+deb/libp11-kit0/0.23.22-1
+deb/libpam-modules/1.4.0-9+deb11u1
+deb/libpam-modules-bin/1.4.0-9+deb11u1
+deb/libpam-runtime/1.4.0-9+deb11u1
+deb/libpam0g/1.4.0-9+deb11u1
+deb/libpcre2-8-0/10.36-2+deb11u1
+deb/libpcre3/2:8.39-13
+deb/libseccomp2/2.5.1-1+deb11u1
+deb/libselinux1/3.1-3
+deb/libsemanage-common/3.1-1
+deb/libsemanage1/3.1-1+b2
+deb/libsepol1/3.1-1
+deb/libsmartcols1/2.36.1-8+deb11u1
+deb/libss2/1.46.2-2
+deb/libssl1.1/1.1.1w-0+deb11u1
+deb/libstdc++6/10.2.1-6
+deb/libsystemd0/247.3-7+deb11u4
+deb/libtasn1-6/4.16.0-2+deb11u1
+deb/libtinfo6/6.2+20201114-2+deb11u2
+deb/libtirpc-common/1.3.1-1+deb11u1
+deb/libtirpc3/1.3.1-1+deb11u1
+deb/libudev1/247.3-7+deb11u4
+deb/libunistring2/0.9.10-4
+deb/libuuid1/2.36.1-8+deb11u1
+deb/libxxhash0/0.8.0-2
+deb/libzstd1/1.4.8+dfsg-2.1
+deb/login/1:4.8.1-1
+deb/logsave/1.46.2-2
+deb/lsb-base/11.1.0
+deb/mawk/1.3.4.20200120-2
+deb/mount/2.36.1-8+deb11u1
+deb/ncurses-base/6.2+20201114-2+deb11u2
+deb/ncurses-bin/6.2+20201114-2+deb11u2
+deb/passwd/1:4.8.1-1
+deb/perl-base/5.32.1-4+deb11u3
+deb/sed/4.7-1
+deb/sysvinit-utils/2.96-7+deb11u1
+deb/tar/1.34+dfsg-1+deb11u1
+deb/tzdata/2024a-0+deb11u1
+deb/util-linux/2.36.1-8+deb11u1
+deb/zlib1g/1:1.2.11.dfsg-2+deb11u2
+
diff --git a/test/sbom/testdata/debian-12-cli.txt b/test/sbom/testdata/debian-12-cli.txt
new file mode 100644
index 0000000000..e27f4f907c
--- /dev/null
+++ b/test/sbom/testdata/debian-12-cli.txt
@@ -0,0 +1,89 @@
+deb/adduser/3.134
+deb/apt/2.6.1
+deb/base-files/12.4+deb12u5
+deb/base-passwd/3.6.1
+deb/bash/5.2.15-2+b2
+deb/bsdutils/1:2.38.1-5+b1
+deb/coreutils/9.1-1
+deb/dash/0.5.12-2
+deb/debconf/1.5.82
+deb/debian-archive-keyring/2023.3+deb12u1
+deb/debianutils/5.7-0.5~deb12u1
+deb/diffutils/1:3.8-4
+deb/dpkg/1.21.22
+deb/e2fsprogs/1.47.0-2
+deb/findutils/4.9.0-4
+deb/gcc-12-base/12.2.0-14
+deb/gpgv/2.2.40-1.1
+deb/grep/3.8-5
+deb/gzip/1.12-1
+deb/hostname/3.23+nmu1
+deb/init-system-helpers/1.65.2
+deb/libacl1/2.3.1-3
+deb/libapt-pkg6.0/2.6.1
+deb/libattr1/1:2.5.1-4
+deb/libaudit-common/1:3.0.9-1
+deb/libaudit1/1:3.0.9-1
+deb/libblkid1/2.38.1-5+b1
+deb/libbz2-1.0/1.0.8-5+b1
+deb/libc-bin/2.36-9+deb12u4
+deb/libc6/2.36-9+deb12u4
+deb/libcap-ng0/0.8.3-1+b3
+deb/libcap2/1:2.66-4
+deb/libcom-err2/1.47.0-2
+deb/libcrypt1/1:4.4.33-2
+deb/libdb5.3/5.3.28+dfsg2-1
+deb/libdebconfclient0/0.270
+deb/libext2fs2/1.47.0-2
+deb/libffi8/3.4.4-1
+deb/libgcc-s1/12.2.0-14
+deb/libgcrypt20/1.10.1-3
+deb/libgmp10/2:6.2.1+dfsg1-1.1
+deb/libgnutls30/3.7.9-2+deb12u2
+deb/libgpg-error0/1.46-1
+deb/libhogweed6/3.8.1-2
+deb/libidn2-0/2.3.3-1+b1
+deb/liblz4-1/1.9.4-1
+deb/liblzma5/5.4.1-0.2
+deb/libmd0/1.0.4-2
+deb/libmount1/2.38.1-5+b1
+deb/libnettle8/3.8.1-2
+deb/libp11-kit0/0.24.1-2
+deb/libpam-modules/1.5.2-6+deb12u1
+deb/libpam-modules-bin/1.5.2-6+deb12u1
+deb/libpam-runtime/1.5.2-6+deb12u1
+deb/libpam0g/1.5.2-6+deb12u1
+deb/libpcre2-8-0/10.42-1
+deb/libseccomp2/2.5.4-1+b3
+deb/libselinux1/3.4-1+b6
+deb/libsemanage-common/3.4-1
+deb/libsemanage2/3.4-1+b5
+deb/libsepol2/3.4-2.1
+deb/libsmartcols1/2.38.1-5+b1
+deb/libss2/1.47.0-2
+deb/libstdc++6/12.2.0-14
+deb/libsystemd0/252.22-1~deb12u1
+deb/libtasn1-6/4.19.0-2
+deb/libtinfo6/6.4-4
+deb/libudev1/252.22-1~deb12u1
+deb/libunistring2/1.0-2
+deb/libuuid1/2.38.1-5+b1
+deb/libxxhash0/0.8.1-1
+deb/libzstd1/1.5.4+dfsg2-5
+deb/login/1:4.13+dfsg1-1+b1
+deb/logsave/1.47.0-2
+deb/mawk/1.3.4.20200120-3.1
+deb/mount/2.38.1-5+b1
+deb/ncurses-base/6.4-4
+deb/ncurses-bin/6.4-4
+deb/passwd/1:4.13+dfsg1-1+b1
+deb/perl-base/5.36.0-7+deb12u1
+deb/sed/4.9-1
+deb/sysvinit-utils/3.06-4
+deb/tar/1.34+dfsg-1.2+deb12u1
+deb/tzdata/2024a-0+deb12u1
+deb/usr-is-merged/37~deb12u1
+deb/util-linux/2.38.1-5+b1
+deb/util-linux-extra/2.38.1-5+b1
+deb/zlib1g/1:1.2.13.dfsg-1
+
diff --git a/test/sbom/testdata/debian-7-cli.txt b/test/sbom/testdata/debian-7-cli.txt
new file mode 100644
index 0000000000..092540e14e
--- /dev/null
+++ b/test/sbom/testdata/debian-7-cli.txt
@@ -0,0 +1,81 @@
+deb/apt/0.9.7.9+deb7u7
+deb/base-files/7.1wheezy11
+deb/base-passwd/3.5.26
+deb/bash/4.2+dfsg-0.1+deb7u4
+deb/bsdutils/1:2.20.1-5.3
+deb/coreutils/8.13-3.5
+deb/dash/0.5.7-3
+deb/debconf/1.5.49
+deb/debconf-i18n/1.5.49
+deb/debian-archive-keyring/2014.3~deb7u1
+deb/debianutils/4.3.2
+deb/diffutils/1:3.2-6
+deb/dpkg/1.16.18
+deb/e2fslibs/1.42.5-1.1+deb7u1
+deb/e2fsprogs/1.42.5-1.1+deb7u1
+deb/findutils/4.4.2-4
+deb/gcc-4.7-base/4.7.2-5
+deb/gnupg/1.4.12-7+deb7u9
+deb/gpgv/1.4.12-7+deb7u9
+deb/grep/2.12-2
+deb/gzip/1.5-1.1
+deb/hostname/3.11
+deb/initscripts/2.88dsf-41+deb7u1
+deb/insserv/1.14.0-5
+deb/iproute/20120521-3+b3
+deb/iputils-ping/3:20101006-1+b1
+deb/libacl1/2.2.51-8
+deb/libapt-pkg4.12/0.9.7.9+deb7u7
+deb/libattr1/1:2.4.46-8
+deb/libblkid1/2.20.1-5.3
+deb/libbz2-1.0/1.0.6-4
+deb/libc-bin/2.13-38+deb7u12
+deb/libc6/2.13-38+deb7u12
+deb/libcomerr2/1.42.5-1.1+deb7u1
+deb/libdb5.1/5.1.29-5+deb7u1
+deb/libgcc1/1:4.7.2-5
+deb/liblocale-gettext-perl/1.05-7+b1
+deb/liblzma5/5.1.1alpha+20120614-2
+deb/libmount1/2.20.1-5.3
+deb/libncurses5/5.9-10
+deb/libpam-modules/1.1.3-7.1
+deb/libpam-modules-bin/1.1.3-7.1
+deb/libpam-runtime/1.1.3-7.1
+deb/libpam0g/1.1.3-7.1
+deb/libreadline6/6.2+dfsg-0.1
+deb/libselinux1/2.1.9-5
+deb/libsemanage-common/2.1.6-6
+deb/libsemanage1/2.1.6-6
+deb/libsepol1/2.1.4-3
+deb/libslang2/2.2.4-15
+deb/libss2/1.42.5-1.1+deb7u1
+deb/libssl1.0.0/1.0.1t-1+deb7u4
+deb/libstdc++6/4.7.2-5
+deb/libtext-charwidth-perl/0.04-7+b1
+deb/libtext-iconv-perl/1.7-5
+deb/libtext-wrapi18n-perl/0.06-7
+deb/libtinfo5/5.9-10
+deb/libusb-0.1-4/2:0.1.12-20+nmu1
+deb/libustr-1.0-1/1.0.4-3
+deb/libuuid1/2.20.1-5.3
+deb/login/1:4.1.5.1-1+deb7u1
+deb/lsb-base/4.1+Debian8+deb7u1
+deb/mawk/1.3.3-17
+deb/mount/2.20.1-5.3
+deb/multiarch-support/2.13-38+deb7u12
+deb/ncurses-base/5.9-10
+deb/ncurses-bin/5.9-10
+deb/passwd/1:4.1.5.1-1+deb7u1
+deb/perl-base/5.14.2-21+deb7u6
+deb/readline-common/6.2+dfsg-0.1
+deb/sed/4.2.1-10
+deb/sensible-utils/0.0.7+deb7u1
+deb/sysv-rc/2.88dsf-41+deb7u1
+deb/sysvinit/2.88dsf-41+deb7u1
+deb/sysvinit-utils/2.88dsf-41+deb7u1
+deb/tar/1.26+dfsg-0.1+deb7u1
+deb/tzdata/2018e-0+deb7u1
+deb/util-linux/2.20.1-5.3
+deb/xz-utils/5.1.1alpha+20120614-2
+deb/zlib1g/1:1.2.7.dfsg-13
+
diff --git a/test/sbom/testdata/debian-8-cli.txt b/test/sbom/testdata/debian-8-cli.txt
new file mode 100644
index 0000000000..ec6b43339d
--- /dev/null
+++ b/test/sbom/testdata/debian-8-cli.txt
@@ -0,0 +1,112 @@
+deb/acl/2.2.52-2
+deb/adduser/3.113+nmu3
+deb/apt/1.0.9.8.6
+deb/base-files/8+deb8u11
+deb/base-passwd/3.5.37
+deb/bash/4.3-11+deb8u2
+deb/bsdutils/1:2.25.2-6
+deb/coreutils/8.23-4
+deb/dash/0.5.7-4+b1
+deb/debconf/1.5.56+deb8u1
+deb/debconf-i18n/1.5.56+deb8u1
+deb/debian-archive-keyring/2017.5~deb8u1
+deb/debianutils/4.4+b1
+deb/diffutils/1:3.3-1+b1
+deb/dmsetup/2:1.02.90-2.2+deb8u1
+deb/dpkg/1.17.27
+deb/e2fslibs/1.42.12-2+deb8u2
+deb/e2fsprogs/1.42.12-2+deb8u2
+deb/findutils/4.4.2-9+b1
+deb/gcc-4.8-base/4.8.4-1
+deb/gcc-4.9-base/4.9.2-10+deb8u2
+deb/gnupg/1.4.18-7+deb8u5
+deb/gpgv/1.4.18-7+deb8u5
+deb/grep/2.20-4.1
+deb/gzip/1.6-4
+deb/hostname/3.15
+deb/init/1.22
+deb/initscripts/2.88dsf-59
+deb/insserv/1.14.0-5
+deb/iproute2/3.16.0-2
+deb/iputils-ping/3:20121221-5+b2
+deb/libacl1/2.2.52-2
+deb/libapt-pkg4.12/1.0.9.8.6
+deb/libattr1/1:2.4.47-2
+deb/libaudit-common/1:2.4-1
+deb/libaudit1/1:2.4-1+b1
+deb/libblkid1/2.25.2-6
+deb/libbz2-1.0/1.0.6-7+deb8u2
+deb/libc-bin/2.19-18+deb8u10
+deb/libc6/2.19-18+deb8u10
+deb/libcap2/1:2.24-8
+deb/libcap2-bin/1:2.24-8
+deb/libcomerr2/1.42.12-2+deb8u2
+deb/libcryptsetup4/2:1.6.6-5
+deb/libdb5.3/5.3.28-9+deb8u1
+deb/libdebconfclient0/0.192
+deb/libdevmapper1.02.1/2:1.02.90-2.2+deb8u1
+deb/libffi6/3.1-2+deb8u1
+deb/libgcc1/1:4.9.2-10+deb8u2
+deb/libgcrypt20/1.6.3-2+deb8u8
+deb/libgmp10/2:6.0.0+dfsg-6
+deb/libgnutls-deb0-28/3.3.30-0+deb8u1
+deb/libgnutls-openssl27/3.3.30-0+deb8u1
+deb/libgpg-error0/1.17-3
+deb/libhogweed2/2.7.1-5+deb8u2
+deb/libkmod2/18-3
+deb/liblocale-gettext-perl/1.05-8+b1
+deb/liblzma5/5.1.1alpha+20120614-2+b3
+deb/libmount1/2.25.2-6
+deb/libncurses5/5.9+20140913-1+deb8u3
+deb/libncursesw5/5.9+20140913-1+deb8u3
+deb/libnettle4/2.7.1-5+deb8u2
+deb/libp11-kit0/0.20.7-1
+deb/libpam-modules/1.1.8-3.1+deb8u2+b1
+deb/libpam-modules-bin/1.1.8-3.1+deb8u2+b1
+deb/libpam-runtime/1.1.8-3.1+deb8u2
+deb/libpam0g/1.1.8-3.1+deb8u2+b1
+deb/libpcre3/2:8.35-3.3+deb8u4
+deb/libprocps3/2:3.3.9-9+deb8u1
+deb/libreadline6/6.3-8+b3
+deb/libselinux1/2.3-2
+deb/libsemanage-common/2.3-1
+deb/libsemanage1/2.3-1+b1
+deb/libsepol1/2.3-2
+deb/libslang2/2.3.0-2
+deb/libsmartcols1/2.25.2-6
+deb/libss2/1.42.12-2+deb8u2
+deb/libstdc++6/4.9.2-10+deb8u2
+deb/libsystemd0/215-17+deb8u13
+deb/libtasn1-6/4.2-3+deb8u4
+deb/libtext-charwidth-perl/0.04-7+b3
+deb/libtext-iconv-perl/1.7-5+b2
+deb/libtext-wrapi18n-perl/0.06-7
+deb/libtinfo5/5.9+20140913-1+deb8u3
+deb/libudev1/215-17+deb8u13
+deb/libusb-0.1-4/2:0.1.12-25
+deb/libustr-1.0-1/1.0.4-3+b2
+deb/libuuid1/2.25.2-6
+deb/login/1:4.2-3+deb8u4
+deb/lsb-base/4.1+Debian13+nmu1
+deb/mawk/1.3.3-17
+deb/mount/2.25.2-6
+deb/multiarch-support/2.19-18+deb8u10
+deb/ncurses-base/5.9+20140913-1+deb8u3
+deb/ncurses-bin/5.9+20140913-1+deb8u3
+deb/passwd/1:4.2-3+deb8u4
+deb/perl-base/5.20.2-3+deb8u12
+deb/procps/2:3.3.9-9+deb8u1
+deb/readline-common/6.3-8
+deb/sed/4.2.2-4+deb8u1
+deb/sensible-utils/0.0.9+deb8u1
+deb/startpar/0.59-3
+deb/systemd/215-17+deb8u13
+deb/systemd-sysv/215-17+deb8u13
+deb/sysv-rc/2.88dsf-59
+deb/sysvinit-utils/2.88dsf-59
+deb/tar/1.27.1-2+deb8u2
+deb/tzdata/2019c-0+deb8u1
+deb/udev/215-17+deb8u13
+deb/util-linux/2.25.2-6
+deb/zlib1g/1:1.2.8.dfsg-2+deb8u1
+
diff --git a/test/sbom/testdata/debian-9-cli.txt b/test/sbom/testdata/debian-9-cli.txt
new file mode 100644
index 0000000000..4327186c0a
--- /dev/null
+++ b/test/sbom/testdata/debian-9-cli.txt
@@ -0,0 +1,84 @@
+deb/adduser/3.115
+deb/apt/1.4.11
+deb/base-files/9.9+deb9u13
+deb/base-passwd/3.5.43
+deb/bash/4.4-5
+deb/bsdutils/1:2.29.2-1+deb9u1
+deb/coreutils/8.26-3
+deb/dash/0.5.8-2.4
+deb/debconf/1.5.61
+deb/debian-archive-keyring/2017.5+deb9u2
+deb/debianutils/4.8.1.1
+deb/diffutils/1:3.5-3
+deb/dpkg/1.18.26
+deb/e2fslibs/1.43.4-2+deb9u2
+deb/e2fsprogs/1.43.4-2+deb9u2
+deb/findutils/4.6.0+git+20161106-2
+deb/gcc-6-base/6.3.0-18+deb9u1
+deb/gpgv/2.1.18-8~deb9u4
+deb/grep/2.27-2
+deb/gzip/1.6-5+deb9u1
+deb/hostname/3.18+b1
+deb/init-system-helpers/1.48
+deb/iproute2/4.9.0-1+deb9u1
+deb/iputils-ping/3:20161105-1
+deb/libacl1/2.2.52-3+b1
+deb/libapt-pkg5.0/1.4.11
+deb/libattr1/1:2.4.47-2+b2
+deb/libaudit-common/1:2.6.7-2
+deb/libaudit1/1:2.6.7-2
+deb/libblkid1/2.29.2-1+deb9u1
+deb/libbz2-1.0/1.0.6-8.1
+deb/libc-bin/2.24-11+deb9u4
+deb/libc6/2.24-11+deb9u4
+deb/libcap-ng0/0.7.7-3+b1
+deb/libcap2/1:2.25-1
+deb/libcomerr2/1.43.4-2+deb9u2
+deb/libdb5.3/5.3.28-12+deb9u1
+deb/libdebconfclient0/0.227
+deb/libelf1/0.168-1+deb9u1
+deb/libfdisk1/2.29.2-1+deb9u1
+deb/libgcc1/1:6.3.0-18+deb9u1
+deb/libgcrypt20/1.7.6-2+deb9u4
+deb/libgpg-error0/1.26-2
+deb/libidn11/1.33-1+deb9u1
+deb/liblz4-1/0.0~r131-2+deb9u1
+deb/liblzma5/5.2.2-1.2+deb9u1
+deb/libmnl0/1.0.4-2
+deb/libmount1/2.29.2-1+deb9u1
+deb/libncursesw5/6.0+20161126-1+deb9u2
+deb/libnettle6/3.3-1+deb9u1
+deb/libpam-modules/1.1.8-3.6
+deb/libpam-modules-bin/1.1.8-3.6
+deb/libpam-runtime/1.1.8-3.6
+deb/libpam0g/1.1.8-3.6
+deb/libpcre3/2:8.39-3
+deb/libselinux1/2.6-3+b3
+deb/libsemanage-common/2.6-2
+deb/libsemanage1/2.6-2
+deb/libsepol1/2.6-2
+deb/libsmartcols1/2.29.2-1+deb9u1
+deb/libss2/1.43.4-2+deb9u2
+deb/libstdc++6/6.3.0-18+deb9u1
+deb/libsystemd0/232-25+deb9u13
+deb/libtinfo5/6.0+20161126-1+deb9u2
+deb/libudev1/232-25+deb9u13
+deb/libustr-1.0-1/1.0.4-6
+deb/libuuid1/2.29.2-1+deb9u1
+deb/login/1:4.4-4.1+deb9u1
+deb/lsb-base/9.20161125
+deb/mawk/1.3.3-17+b3
+deb/mount/2.29.2-1+deb9u1
+deb/multiarch-support/2.24-11+deb9u4
+deb/ncurses-base/6.0+20161126-1+deb9u2
+deb/ncurses-bin/6.0+20161126-1+deb9u2
+deb/passwd/1:4.4-4.1+deb9u1
+deb/perl-base/5.24.1-3+deb9u7
+deb/sed/4.4-1
+deb/sensible-utils/0.0.9+deb9u1
+deb/sysvinit-utils/2.88dsf-59.9
+deb/tar/1.29b-1.1+deb9u1
+deb/tzdata/2021a-0+deb9u4
+deb/util-linux/2.29.2-1+deb9u1
+deb/zlib1g/1:1.2.8.dfsg-5+deb9u1
+
diff --git a/test/sbom/testdata/fedora-37-cli.txt b/test/sbom/testdata/fedora-37-cli.txt
new file mode 100644
index 0000000000..3d08096fb2
--- /dev/null
+++ b/test/sbom/testdata/fedora-37-cli.txt
@@ -0,0 +1,152 @@
+rpm/alternatives/1.24-1.fc37
+rpm/audit-libs/3.1.2-5.fc37
+rpm/authselect/1.4.2-1.fc37
+rpm/authselect-libs/1.4.2-1.fc37
+rpm/basesystem/11-14.fc37
+rpm/bash/5.2.21-1.fc37
+rpm/bzip2-libs/1.0.8-12.fc37
+rpm/ca-certificates/2023.2.60_v7.0.306-1.0.fc37
+rpm/coreutils/9.1-8.fc37
+rpm/coreutils-common/9.1-8.fc37
+rpm/cracklib/2.9.7-30.fc37
+rpm/crypto-policies/20220815-1.gite4ed860.fc37
+rpm/curl/7.85.0-12.fc37
+rpm/cyrus-sasl-lib/2.1.28-8.fc37
+rpm/dnf/4.18.0-2.fc37
+pypi/dnf/4.18.0 /usr/lib/python3.11/site-packages/dnf-4.18.0.dist-info/METADATA
+pypi/dnf/4.18.0 /usr/lib/python3.11/site-packages/dnf-4.18.0.dist-info/METADATA
+rpm/dnf-data/4.18.0-2.fc37
+rpm/elfutils-default-yama-scope/0.190-1.fc37
+rpm/elfutils-libelf/0.190-1.fc37
+rpm/elfutils-libs/0.190-1.fc37
+rpm/expat/2.5.0-1.fc37
+rpm/fedora-gpg-keys/37-2
+rpm/fedora-release-common/37-18
+rpm/fedora-release-container/37-18
+rpm/fedora-release-identity-container/37-18
+rpm/fedora-repos/37-2
+rpm/fedora-repos-modular/37-2
+rpm/file-libs/5.42-4.fc37
+rpm/filesystem/3.18-2.fc37
+rpm/findutils/1:4.9.0-2.fc37
+rpm/gawk/5.1.1-4.fc37
+rpm/gdbm-libs/1:1.23-2.fc37
+rpm/glib2/2.74.7-2.fc37
+rpm/glibc/2.36-17.fc37
+rpm/glibc-common/2.36-17.fc37
+rpm/glibc-minimal-langpack/2.36-17.fc37
+rpm/gmp/1:6.2.1-3.fc37
+rpm/gnupg2/2.3.8-1.fc37
+rpm/gnutls/3.8.1-1.fc37
+rpm/gpg-pubkey/5323552a-6112bcdc
+rpm/gpgme/1.17.0-4.fc37
+rpm/grep/3.7-4.fc37
+rpm/gzip/1.12-2.fc37
+rpm/ima-evm-utils/1.4-6.fc37
+rpm/json-c/0.17-1.fc37
+rpm/keyutils-libs/1.6.1-5.fc37
+rpm/krb5-libs/1.19.2-13.fc37
+rpm/libacl/2.3.1-4.fc37
+rpm/libarchive/3.6.1-3.fc37
+rpm/libassuan/2.5.5-5.fc37
+rpm/libattr/2.5.1-5.fc37
+rpm/libb2/0.98.1-7.fc37
+rpm/libblkid/2.38.1-1.fc37
+rpm/libbrotli/1.0.9-9.fc37
+rpm/libcap/2.48-5.fc37
+rpm/libcap-ng/0.8.3-3.fc37
+rpm/libcom_err/1.46.5-3.fc37
+rpm/libcomps/0.1.20-1.fc37
+pypi/libcomps/0.1.20 /usr/lib64/python3.11/site-packages/libcomps-0.1.20-py3.11.egg-info/PKG-INFO
+rpm/libcurl/7.85.0-12.fc37
+rpm/libdb/5.3.28-53.fc37
+rpm/libdnf/0.72.0-1.fc37
+pypi/libdnf/0.72.0 /usr/lib64/python3.11/site-packages/libdnf-0.72.0.dist-info/METADATA
+rpm/libeconf/0.5.2-1.fc37
+rpm/libevent/2.1.12-7.fc37
+rpm/libffi/3.4.4-1.fc37
+rpm/libfsverity/1.4-8.fc37
+rpm/libgcc/12.3.1-1.fc37
+rpm/libgcrypt/1.10.1-4.fc37
+rpm/libgomp/12.3.1-1.fc37
+rpm/libgpg-error/1.46-1.fc37
+rpm/libidn2/2.3.4-1.fc37
+rpm/libksba/1.6.3-1.fc37
+rpm/libmodulemd/2.15.0-2.fc37
+rpm/libmount/2.38.1-1.fc37
+rpm/libnghttp2/1.51.0-2.fc37
+rpm/libnsl2/2.0.0-4.fc37
+rpm/libpsl/0.21.1-6.fc37
+rpm/libpwquality/1.4.5-3.fc37
+rpm/librepo/1.17.0-1.fc37
+rpm/libreport-filesystem/2.17.11-1.fc37
+rpm/libselinux/3.5-1.fc37
+rpm/libsemanage/3.5-2.fc37
+rpm/libsepol/3.5-1.fc37
+rpm/libsigsegv/2.14-3.fc37
+rpm/libsmartcols/2.38.1-1.fc37
+rpm/libsolv/0.7.25-1.fc37
+rpm/libssh/0.10.5-1.fc37
+rpm/libssh-config/0.10.5-1.fc37
+rpm/libstdc++/12.3.1-1.fc37
+rpm/libtasn1/4.19.0-1.fc37
+rpm/libtirpc/1.3.3-1.rc1.fc37
+rpm/libunistring/1.0-2.fc37
+rpm/libuuid/2.38.1-1.fc37
+rpm/libverto/0.3.2-4.fc37
+rpm/libxcrypt/4.4.36-1.fc37
+rpm/libxml2/2.10.4-1.fc37
+rpm/libyaml/0.2.5-8.fc37
+rpm/libzstd/1.5.5-1.fc37
+rpm/lua-libs/5.4.4-9.fc37
+rpm/lz4-libs/1.9.4-1.fc37
+rpm/mpdecimal/2.5.1-4.fc37
+rpm/mpfr/4.1.0-10.fc37
+rpm/ncurses-base/6.4-3.20230114.fc37
+rpm/ncurses-libs/6.4-3.20230114.fc37
+rpm/nettle/3.8-2.fc37
+rpm/npth/1.6-9.fc37
+rpm/openldap/2.6.6-1.fc37
+rpm/openssl-libs/1:3.0.9-1.fc37
+rpm/p11-kit/0.25.2-1.fc37
+rpm/p11-kit-trust/0.25.2-1.fc37
+rpm/pam/1.5.2-14.fc37
+rpm/pam-libs/1.5.2-14.fc37
+rpm/pcre/8.45-1.fc37.2
+rpm/pcre2/10.40-1.fc37.1
+rpm/pcre2-syntax/10.40-1.fc37.1
+rpm/popt/1.19-1.fc37
+rpm/publicsuffix-list-dafsa/20230812-1.fc37
+rpm/python-pip-wheel/22.2.2-3.fc37
+rpm/python-setuptools-wheel/62.6.0-3.fc37
+rpm/python3/3.11.6-1.fc37
+rpm/python3-dnf/4.18.0-2.fc37
+rpm/python3-hawkey/0.72.0-1.fc37
+rpm/python3-libcomps/0.1.20-1.fc37
+rpm/python3-libdnf/0.72.0-1.fc37
+rpm/python3-libs/3.11.6-1.fc37
+rpm/python3-rpm/4.18.2-1.fc37
+rpm/readline/8.2-2.fc37
+rpm/rootfiles/8.1-32.fc37
+rpm/rpm/4.18.2-1.fc37
+pypi/rpm/4.18.2 /usr/lib64/python3.11/site-packages/rpm-4.18.2-py3.11.egg-info
+rpm/rpm-build-libs/4.18.2-1.fc37
+rpm/rpm-libs/4.18.2-1.fc37
+rpm/rpm-sign-libs/4.18.2-1.fc37
+rpm/sed/4.8-11.fc37
+rpm/setup/2.14.1-2.fc37
+rpm/shadow-utils/2:4.12.3-6.fc37
+rpm/sqlite-libs/3.40.0-1.fc37
+rpm/sudo/1.9.13-1.p2.fc37
+rpm/systemd-libs/251.14-2.fc37
+rpm/tar/2:1.34-6.fc37
+rpm/tpm2-tss/3.2.2-1.fc37
+rpm/tzdata/2023c-1.fc37
+rpm/util-linux-core/2.38.1-1.fc37
+rpm/vim-data/2:9.0.2120-1.fc37
+rpm/vim-minimal/2:9.0.2120-1.fc37
+rpm/xz-libs/5.4.1-1.fc37
+rpm/yum/4.18.0-2.fc37
+rpm/zchunk-libs/1.3.2-1.fc37
+rpm/zlib/1.2.12-5.fc37
+
diff --git a/test/sbom/testdata/fedora-38-cli.txt b/test/sbom/testdata/fedora-38-cli.txt
new file mode 100644
index 0000000000..4ed4010475
--- /dev/null
+++ b/test/sbom/testdata/fedora-38-cli.txt
@@ -0,0 +1,152 @@
+rpm/alternatives/1.25-1.fc38
+rpm/audit-libs/3.1.2-5.fc38
+rpm/authselect/1.4.3-1.fc38
+rpm/authselect-libs/1.4.3-1.fc38
+rpm/basesystem/11-15.fc38
+rpm/bash/5.2.21-1.fc38
+rpm/bzip2-libs/1.0.8-13.fc38
+rpm/ca-certificates/2023.2.60_v7.0.306-1.0.fc38
+rpm/coreutils/9.1-12.fc38
+rpm/coreutils-common/9.1-12.fc38
+rpm/cracklib/2.9.11-1.fc38
+rpm/crypto-policies/20230301-1.gita12f7b2.fc38
+rpm/curl/8.0.1-5.fc38
+rpm/cyrus-sasl-lib/2.1.28-9.fc38
+rpm/dnf/4.18.1-1.fc38
+pypi/dnf/4.18.1 /usr/lib/python3.11/site-packages/dnf-4.18.1.dist-info/METADATA
+pypi/dnf/4.18.1 /usr/lib/python3.11/site-packages/dnf-4.18.1.dist-info/METADATA
+rpm/dnf-data/4.18.1-1.fc38
+rpm/elfutils-default-yama-scope/0.190-1.fc38
+rpm/elfutils-libelf/0.190-1.fc38
+rpm/elfutils-libs/0.190-1.fc38
+rpm/expat/2.5.0-2.fc38
+rpm/fedora-gpg-keys/38-1
+rpm/fedora-release-common/38-36
+rpm/fedora-release-container/38-36
+rpm/fedora-release-identity-container/38-36
+rpm/fedora-repos/38-1
+rpm/fedora-repos-modular/38-1
+rpm/file-libs/5.44-3.fc38
+rpm/filesystem/3.18-3.fc38
+rpm/findutils/1:4.9.0-3.fc38
+rpm/gawk/5.1.1-5.fc38
+rpm/gdbm-libs/1:1.23-3.fc38
+rpm/glib2/2.76.5-2.fc38
+rpm/glibc/2.37-13.fc38
+rpm/glibc-common/2.37-13.fc38
+rpm/glibc-minimal-langpack/2.37-13.fc38
+rpm/gmp/1:6.2.1-4.fc38
+rpm/gnupg2/2.4.0-3.fc38
+rpm/gnutls/3.8.1-1.fc38
+rpm/gpg-pubkey/eb10b464-6202d9c6
+rpm/gpgme/1.17.1-5.fc38
+rpm/grep/3.8-3.fc38
+rpm/gzip/1.12-3.fc38
+rpm/ima-evm-utils/1.4-7.fc38
+rpm/json-c/0.17-1.fc38
+rpm/keyutils-libs/1.6.1-6.fc38
+rpm/krb5-libs/1.21-3.fc38
+rpm/libacl/2.3.1-6.fc38
+rpm/libarchive/3.6.1-4.fc38
+rpm/libassuan/2.5.6-1.fc38
+rpm/libattr/2.5.1-6.fc38
+rpm/libb2/0.98.1-8.fc38
+rpm/libblkid/2.38.1-4.fc38
+rpm/libbrotli/1.0.9-11.fc38
+rpm/libcap/2.48-6.fc38
+rpm/libcap-ng/0.8.3-8.fc38
+rpm/libcom_err/1.46.5-4.fc38
+rpm/libcomps/0.1.20-1.fc38
+pypi/libcomps/0.1.20 /usr/lib64/python3.11/site-packages/libcomps-0.1.20-py3.11.egg-info/PKG-INFO
+rpm/libcurl/8.0.1-5.fc38
+rpm/libdb/5.3.28-55.fc38
+rpm/libdnf/0.72.0-1.fc38
+pypi/libdnf/0.72.0 /usr/lib64/python3.11/site-packages/libdnf-0.72.0.dist-info/METADATA
+rpm/libeconf/0.5.2-1.fc38
+rpm/libevent/2.1.12-8.fc38
+rpm/libffi/3.4.4-2.fc38
+rpm/libfsverity/1.4-9.fc38
+rpm/libgcc/13.2.1-4.fc38
+rpm/libgcrypt/1.10.2-1.fc38
+rpm/libgomp/13.2.1-4.fc38
+rpm/libgpg-error/1.47-1.fc38
+rpm/libidn2/2.3.4-2.fc38
+rpm/libksba/1.6.4-1.fc38
+rpm/libmodulemd/2.15.0-2.fc38
+rpm/libmount/2.38.1-4.fc38
+rpm/libnghttp2/1.52.0-2.fc38
+rpm/libnsl2/2.0.0-5.fc38
+rpm/libpsl/0.21.2-2.fc38
+rpm/libpwquality/1.4.5-3.fc38
+rpm/librepo/1.17.0-1.fc38
+rpm/libreport-filesystem/2.17.11-1.fc38
+rpm/libselinux/3.5-1.fc38
+rpm/libsemanage/3.5-2.fc38
+rpm/libsepol/3.5-1.fc38
+rpm/libsigsegv/2.14-4.fc38
+rpm/libsmartcols/2.38.1-4.fc38
+rpm/libsolv/0.7.25-1.fc38
+rpm/libssh/0.10.5-1.fc38
+rpm/libssh-config/0.10.5-1.fc38
+rpm/libstdc++/13.2.1-4.fc38
+rpm/libtasn1/4.19.0-2.fc38
+rpm/libtirpc/1.3.4-0.fc38
+rpm/libunistring/1.1-3.fc38
+rpm/libuuid/2.38.1-4.fc38
+rpm/libverto/0.3.2-5.fc38
+rpm/libxcrypt/4.4.36-1.fc38
+rpm/libxml2/2.10.4-1.fc38
+rpm/libyaml/0.2.5-9.fc38
+rpm/libzstd/1.5.5-1.fc38
+rpm/lua-libs/5.4.4-9.fc38
+rpm/lz4-libs/1.9.4-2.fc38
+rpm/mpdecimal/2.5.1-6.fc38
+rpm/mpfr/4.1.1-3.fc38
+rpm/ncurses-base/6.4-3.20230114.fc38
+rpm/ncurses-libs/6.4-3.20230114.fc38
+rpm/nettle/3.8-3.fc38
+rpm/npth/1.6-12.fc38
+rpm/openldap/2.6.6-1.fc38
+rpm/openssl-libs/1:3.0.9-2.fc38
+rpm/p11-kit/0.25.2-1.fc38
+rpm/p11-kit-trust/0.25.2-1.fc38
+rpm/pam/1.5.2-16.fc38
+rpm/pam-libs/1.5.2-16.fc38
+rpm/pcre2/10.42-1.fc38.1
+rpm/pcre2-syntax/10.42-1.fc38.1
+rpm/popt/1.19-2.fc38
+rpm/publicsuffix-list-dafsa/20230812-1.fc38
+rpm/python-pip-wheel/22.3.1-3.fc38
+rpm/python-setuptools-wheel/65.5.1-2.fc38
+rpm/python3/3.11.6-1.fc38
+rpm/python3-dnf/4.18.1-1.fc38
+rpm/python3-hawkey/0.72.0-1.fc38
+rpm/python3-libcomps/0.1.20-1.fc38
+rpm/python3-libdnf/0.72.0-1.fc38
+rpm/python3-libs/3.11.6-1.fc38
+rpm/python3-rpm/4.18.2-1.fc38
+rpm/readline/8.2-3.fc38
+rpm/rootfiles/8.1-33.fc38
+rpm/rpm/4.18.2-1.fc38
+pypi/rpm/4.18.2 /usr/lib64/python3.11/site-packages/rpm-4.18.2-py3.11.egg-info
+rpm/rpm-build-libs/4.18.2-1.fc38
+rpm/rpm-libs/4.18.2-1.fc38
+rpm/rpm-sequoia/1.5.0-1.fc38
+rpm/rpm-sign-libs/4.18.2-1.fc38
+rpm/sed/4.8-12.fc38
+rpm/setup/2.14.3-2.fc38
+rpm/shadow-utils/2:4.13-6.fc38
+rpm/sqlite-libs/3.40.1-2.fc38
+rpm/sudo/1.9.13-2.p2.fc38
+rpm/systemd-libs/253.12-1.fc38
+rpm/tar/2:1.34-8.fc38
+rpm/tpm2-tss/4.0.1-3.fc38
+rpm/tzdata/2023c-1.fc38
+rpm/util-linux-core/2.38.1-4.fc38
+rpm/vim-data/2:9.0.2120-1.fc38
+rpm/vim-minimal/2:9.0.2120-1.fc38
+rpm/xz-libs/5.4.1-1.fc38
+rpm/yum/4.18.1-1.fc38
+rpm/zchunk-libs/1.3.2-1.fc38
+rpm/zlib/1.2.13-3.fc38
+
diff --git a/test/sbom/testdata/fedora-39-cli.txt b/test/sbom/testdata/fedora-39-cli.txt
new file mode 100644
index 0000000000..b3ce3b129e
--- /dev/null
+++ b/test/sbom/testdata/fedora-39-cli.txt
@@ -0,0 +1,149 @@
+rpm/alternatives/1.25-1.fc39
+rpm/audit-libs/3.1.2-5.fc39
+rpm/authselect/1.4.3-1.fc39
+rpm/authselect-libs/1.4.3-1.fc39
+rpm/basesystem/11-18.fc39
+rpm/bash/5.2.21-1.fc39
+rpm/bzip2-libs/1.0.8-16.fc39
+rpm/ca-certificates/2023.2.60_v7.0.306-2.fc39
+rpm/coreutils/9.3-4.fc39
+rpm/coreutils-common/9.3-4.fc39
+rpm/cracklib/2.9.11-2.fc39
+rpm/crypto-policies/20231113-1.gitb402e82.fc39
+rpm/curl/8.2.1-3.fc39
+rpm/cyrus-sasl-lib/2.1.28-11.fc39
+rpm/dnf/4.18.1-2.fc39
+pypi/dnf/4.18.1 /usr/lib/python3.12/site-packages/dnf-4.18.1.dist-info/METADATA
+pypi/dnf/4.18.1 /usr/lib/python3.12/site-packages/dnf-4.18.1.dist-info/METADATA
+rpm/dnf-data/4.18.1-2.fc39
+rpm/elfutils-default-yama-scope/0.190-1.fc39
+rpm/elfutils-libelf/0.190-1.fc39
+rpm/elfutils-libs/0.190-1.fc39
+rpm/expat/2.5.0-3.fc39
+rpm/fedora-gpg-keys/39-1
+rpm/fedora-release-common/39-30
+rpm/fedora-release-container/39-30
+rpm/fedora-release-identity-container/39-30
+rpm/fedora-repos/39-1
+rpm/file-libs/5.44-5.fc39
+rpm/filesystem/3.18-6.fc39
+rpm/findutils/1:4.9.0-5.fc39
+rpm/gawk/5.2.2-2.fc39
+rpm/gdbm-libs/1:1.23-4.fc39
+rpm/glib2/2.78.1-1.fc39
+rpm/glibc/2.38-11.fc39
+rpm/glibc-common/2.38-11.fc39
+rpm/glibc-minimal-langpack/2.38-11.fc39
+rpm/gmp/1:6.2.1-5.fc39
+rpm/gnupg2/2.4.3-4.fc39
+rpm/gnutls/3.8.1-1.fc39
+rpm/gpg-pubkey/18b8e74c-62f2920f
+rpm/grep/3.11-3.fc39
+rpm/gzip/1.12-6.fc39
+rpm/ima-evm-utils/1.5-2.fc39
+rpm/json-c/0.17-1.fc39
+rpm/keyutils-libs/1.6.1-7.fc39
+rpm/krb5-libs/1.21.2-2.fc39
+rpm/libacl/2.3.1-8.fc39
+rpm/libarchive/3.7.1-1.fc39
+rpm/libassuan/2.5.6-2.fc39
+rpm/libattr/2.5.1-8.fc39
+rpm/libb2/0.98.1-9.fc39
+rpm/libblkid/2.39.2-1.fc39
+rpm/libbrotli/1.1.0-1.fc39
+rpm/libcap/2.48-7.fc39
+rpm/libcap-ng/0.8.3-8.fc39
+rpm/libcom_err/1.47.0-2.fc39
+rpm/libcomps/0.1.20-1.fc39
+pypi/libcomps/0.1.20 /usr/lib64/python3.12/site-packages/libcomps-0.1.20-py3.12.egg-info/PKG-INFO
+rpm/libcurl/8.2.1-3.fc39
+rpm/libdb/5.3.28-56.fc39
+rpm/libdnf/0.72.0-1.fc39
+pypi/libdnf/0.72.0 /usr/lib64/python3.12/site-packages/libdnf-0.72.0.dist-info/METADATA
+rpm/libeconf/0.5.2-1.fc39
+rpm/libevent/2.1.12-9.fc39
+rpm/libffi/3.4.4-4.fc39
+rpm/libfsverity/1.4-10.fc39
+rpm/libgcc/13.2.1-4.fc39
+rpm/libgcrypt/1.10.2-2.fc39
+rpm/libgomp/13.2.1-4.fc39
+rpm/libgpg-error/1.47-2.fc39
+rpm/libidn2/2.3.4-3.fc39
+rpm/libksba/1.6.4-2.fc39
+rpm/libmodulemd/2.15.0-5.fc39
+rpm/libmount/2.39.2-1.fc39
+rpm/libnghttp2/1.55.1-4.fc39
+rpm/libnsl2/2.0.0-6.fc39
+rpm/libpsl/0.21.2-4.fc39
+rpm/libpwquality/1.4.5-6.fc39
+rpm/librepo/1.17.0-1.fc39
+rpm/libreport-filesystem/2.17.11-3.fc39
+rpm/libselinux/3.5-5.fc39
+rpm/libsemanage/3.5-4.fc39
+rpm/libsepol/3.5-2.fc39
+rpm/libsigsegv/2.14-5.fc39
+rpm/libsmartcols/2.39.2-1.fc39
+rpm/libsolv/0.7.25-1.fc39
+rpm/libssh/0.10.5-2.fc39
+rpm/libssh-config/0.10.5-2.fc39
+rpm/libstdc++/13.2.1-4.fc39
+rpm/libtasn1/4.19.0-3.fc39
+rpm/libtirpc/1.3.4-0.fc39
+rpm/libunistring/1.1-5.fc39
+rpm/libuuid/2.39.2-1.fc39
+rpm/libverto/0.3.2-6.fc39
+rpm/libxcrypt/4.4.36-2.fc39
+rpm/libxml2/2.10.4-3.fc39
+rpm/libyaml/0.2.5-12.fc39
+rpm/libzstd/1.5.5-4.fc39
+rpm/lua-libs/5.4.6-3.fc39
+rpm/lz4-libs/1.9.4-4.fc39
+rpm/mpdecimal/2.5.1-7.fc39
+rpm/mpfr/4.2.0-3.fc39
+rpm/ncurses-base/6.4-7.20230520.fc39
+rpm/ncurses-libs/6.4-7.20230520.fc39
+rpm/nettle/3.9.1-2.fc39
+rpm/npth/1.6-14.fc39
+rpm/openldap/2.6.6-1.fc39
+rpm/openssl-libs/1:3.1.1-4.fc39
+rpm/p11-kit/0.25.3-1.fc39
+rpm/p11-kit-trust/0.25.3-1.fc39
+rpm/pam/1.5.3-3.fc39
+rpm/pam-libs/1.5.3-3.fc39
+rpm/pcre2/10.42-1.fc39.2
+rpm/pcre2-syntax/10.42-1.fc39.2
+rpm/popt/1.19-3.fc39
+rpm/publicsuffix-list-dafsa/20230812-1.fc39
+rpm/python-pip-wheel/23.2.1-1.fc39
+rpm/python3/3.12.0-1.fc39
+rpm/python3-dnf/4.18.1-2.fc39
+rpm/python3-hawkey/0.72.0-1.fc39
+rpm/python3-libcomps/0.1.20-1.fc39
+rpm/python3-libdnf/0.72.0-1.fc39
+rpm/python3-libs/3.12.0-1.fc39
+rpm/python3-rpm/4.19.0-1.fc39
+rpm/readline/8.2-4.fc39
+rpm/rootfiles/8.1-34.fc39
+rpm/rpm/4.19.0-1.fc39
+pypi/rpm/4.19.0 /usr/lib64/python3.12/site-packages/rpm-4.19.0-py3.12.egg-info
+rpm/rpm-build-libs/4.19.0-1.fc39
+rpm/rpm-libs/4.19.0-1.fc39
+rpm/rpm-sequoia/1.5.0-1.fc39
+rpm/rpm-sign-libs/4.19.0-1.fc39
+rpm/sed/4.8-14.fc39
+rpm/setup/2.14.4-1.fc39
+rpm/shadow-utils/2:4.14.0-2.fc39
+rpm/sqlite-libs/3.42.0-7.fc39
+rpm/sudo/1.9.14-1.p3.fc39
+rpm/systemd-libs/254.5-2.fc39
+rpm/tar/2:1.35-2.fc39
+rpm/tpm2-tss/4.0.1-4.fc39
+rpm/tzdata/2023c-2.fc39
+rpm/util-linux-core/2.39.2-1.fc39
+rpm/vim-data/2:9.0.2120-1.fc39
+rpm/vim-minimal/2:9.0.2120-1.fc39
+rpm/xz-libs/5.4.4-1.fc39
+rpm/yum/4.18.1-2.fc39
+rpm/zchunk-libs/1.3.2-1.fc39
+rpm/zlib/1.2.13-4.fc39
+
diff --git a/test/sbom/testdata/fedora-40-cli.txt b/test/sbom/testdata/fedora-40-cli.txt
new file mode 100644
index 0000000000..de27e99131
--- /dev/null
+++ b/test/sbom/testdata/fedora-40-cli.txt
@@ -0,0 +1,149 @@
+rpm/alternatives/1.25-1.fc39
+rpm/audit-libs/3.1.2-5.fc40
+rpm/authselect/1.4.3-1.fc40
+rpm/authselect-libs/1.4.3-1.fc40
+rpm/basesystem/11-18.fc39
+rpm/bash/5.2.21-2.fc40
+rpm/bzip2-libs/1.0.8-16.fc39
+rpm/ca-certificates/2023.2.62_v7.0.401-4.fc40
+rpm/coreutils/9.4-1.fc40
+rpm/coreutils-common/9.4-1.fc40
+rpm/cracklib/2.9.11-2.fc39
+rpm/crypto-policies/20231113-1.gitb402e82.fc40
+rpm/curl/8.4.0-1.fc40
+rpm/cyrus-sasl-lib/2.1.28-11.fc39
+rpm/dnf/4.18.1-2.fc40
+pypi/dnf/4.18.1 /usr/lib/python3.12/site-packages/dnf-4.18.1.dist-info/METADATA
+pypi/dnf/4.18.1 /usr/lib/python3.12/site-packages/dnf-4.18.1.dist-info/METADATA
+rpm/dnf-data/4.18.1-2.fc40
+rpm/elfutils-default-yama-scope/0.190-2.fc40
+rpm/elfutils-libelf/0.190-2.fc40
+rpm/elfutils-libs/0.190-2.fc40
+rpm/expat/2.5.0-3.fc39
+rpm/fedora-gpg-keys/40-0.2
+rpm/fedora-release-common/40-0.20
+rpm/fedora-release-container/40-0.20
+rpm/fedora-release-identity-container/40-0.20
+rpm/fedora-repos/40-0.2
+rpm/fedora-repos-rawhide/40-0.2
+rpm/file-libs/5.45-1.fc40
+rpm/filesystem/3.18-6.fc39
+rpm/findutils/1:4.9.0-6.fc40
+rpm/gawk/5.2.2-2.fc39
+rpm/gdbm/1:1.23-4.fc39
+rpm/gdbm-libs/1:1.23-4.fc39
+rpm/glib2/2.78.1-1.fc40
+rpm/glibc/2.38.9000-22.fc40
+rpm/glibc-common/2.38.9000-22.fc40
+rpm/glibc-minimal-langpack/2.38.9000-22.fc40
+rpm/gmp/1:6.2.1-5.fc39
+rpm/gnupg2/2.4.3-4.fc40
+rpm/gnutls/3.8.1-3.fc40
+rpm/gpg-pubkey/a15b79cc-63d04c2c
+rpm/grep/3.11-5.fc40
+rpm/gzip/1.12-6.fc39
+rpm/ima-evm-utils/1.5-2.fc39
+rpm/json-c/0.17-1.fc40
+rpm/keyutils-libs/1.6.1-7.fc39
+rpm/krb5-libs/1.21.2-2.fc40
+rpm/libacl/2.3.1-10.fc40
+rpm/libarchive/3.7.2-1.fc40
+rpm/libassuan/2.5.6-2.fc39
+rpm/libattr/2.5.1-9.fc40
+rpm/libb2/0.98.1-9.fc39
+rpm/libblkid/2.39.2-1.fc40
+rpm/libbrotli/1.1.0-1.fc40
+rpm/libcap/2.69-1.fc40
+rpm/libcap-ng/0.8.3-8.fc40
+rpm/libcom_err/1.47.0-2.fc39
+rpm/libcomps/0.1.20-1.fc40
+pypi/libcomps/0.1.20 /usr/lib64/python3.12/site-packages/libcomps-0.1.20-py3.12.egg-info/PKG-INFO
+rpm/libcurl/8.4.0-1.fc40
+rpm/libdnf/0.72.0-1.fc40
+pypi/libdnf/0.72.0 /usr/lib64/python3.12/site-packages/libdnf-0.72.0.dist-info/METADATA
+rpm/libeconf/0.5.2-1.fc40
+rpm/libevent/2.1.12-9.fc39
+rpm/libffi/3.4.4-4.fc39
+rpm/libfsverity/1.4-10.fc39
+rpm/libgcc/13.2.1-5.fc40
+rpm/libgcrypt/1.10.3-1.fc40
+rpm/libgomp/13.2.1-5.fc40
+rpm/libgpg-error/1.47-2.fc39
+rpm/libidn2/2.3.4-3.fc39
+rpm/libksba/1.6.5-1.fc40
+rpm/libmodulemd/2.15.0-5.fc39
+rpm/libmount/2.39.2-1.fc40
+rpm/libnghttp2/1.58.0-1.fc40
+rpm/libnsl2/2.0.0-6.fc39
+rpm/libpsl/0.21.2-4.fc39
+rpm/libpwquality/1.4.5-6.fc39
+rpm/librepo/1.17.0-1.fc40
+rpm/libreport-filesystem/2.17.11-3.fc39
+rpm/libselinux/3.6-0.rc2.1.fc40
+rpm/libsemanage/3.6-0.rc2.1.fc40
+rpm/libsepol/3.6-0.rc2.1.fc40
+rpm/libsigsegv/2.14-5.fc39
+rpm/libsmartcols/2.39.2-1.fc40
+rpm/libsolv/0.7.25-1.fc40
+rpm/libssh/0.10.5-2.fc39
+rpm/libssh-config/0.10.5-2.fc39
+rpm/libstdc++/13.2.1-5.fc40
+rpm/libtasn1/4.19.0-3.fc39
+rpm/libtirpc/1.3.4-0.fc40
+rpm/libunistring/1.1-5.fc40
+rpm/libuuid/2.39.2-1.fc40
+rpm/libverto/0.3.2-6.fc39
+rpm/libxcrypt/4.4.36-2.fc39
+rpm/libxml2/2.12.1-1.fc40
+rpm/libyaml/0.2.5-12.fc39
+rpm/libzstd/1.5.5-4.fc39
+rpm/lua-libs/5.4.6-3.fc39
+rpm/lz4-libs/1.9.4-4.fc39
+rpm/mpdecimal/2.5.1-7.fc39
+rpm/mpfr/4.2.1-1.fc40
+rpm/ncurses-base/6.4-8.20231001.fc40
+rpm/ncurses-libs/6.4-8.20231001.fc40
+rpm/nettle/3.9.1-2.fc39
+rpm/npth/1.6-14.fc39
+rpm/openldap/2.6.6-1.fc39
+rpm/openssl-libs/1:3.1.4-1.fc40
+rpm/p11-kit/0.25.3-1.fc40
+rpm/p11-kit-trust/0.25.3-1.fc40
+rpm/pam/1.5.3-8.fc40
+rpm/pam-libs/1.5.3-8.fc40
+rpm/pcre2/10.42-2.fc40
+rpm/pcre2-syntax/10.42-2.fc40
+rpm/popt/1.19-3.fc39
+rpm/publicsuffix-list-dafsa/20230812-1.fc40
+rpm/python-pip-wheel/23.2.1-1.fc39
+rpm/python3/3.12.0-2.fc40
+rpm/python3-dnf/4.18.1-2.fc40
+rpm/python3-hawkey/0.72.0-1.fc40
+rpm/python3-libcomps/0.1.20-1.fc40
+rpm/python3-libdnf/0.72.0-1.fc40
+rpm/python3-libs/3.12.0-2.fc40
+rpm/python3-rpm/4.19.0-2.fc40
+rpm/readline/8.2-4.fc39
+rpm/rootfiles/8.1-34.fc39
+rpm/rpm/4.19.0-2.fc40
+pypi/rpm/4.19.0 /usr/lib64/python3.12/site-packages/rpm-4.19.0-py3.12.egg-info
+rpm/rpm-build-libs/4.19.0-2.fc40
+rpm/rpm-libs/4.19.0-2.fc40
+rpm/rpm-sequoia/1.5.0-1.fc40
+rpm/rpm-sign-libs/4.19.0-2.fc40
+rpm/sed/4.8-14.fc39
+rpm/setup/2.14.4-1.fc39
+rpm/shadow-utils/2:4.14.0-2.fc40
+rpm/sqlite-libs/3.44.1-1.fc40
+rpm/sudo/1.9.14-1.p3.fc39
+rpm/tar/2:1.35-2.fc40
+rpm/tpm2-tss/4.0.1-5.fc40
+rpm/tzdata/2023c-4.fc40
+rpm/util-linux-core/2.39.2-1.fc40
+rpm/vim-data/2:9.0.2120-1.fc40
+rpm/vim-minimal/2:9.0.2120-1.fc40
+rpm/xz-libs/5.4.5-1.fc40
+rpm/yum/4.18.1-2.fc40
+rpm/zchunk-libs/1.3.2-1.fc40
+rpm/zlib/1.2.13-5.fc40
+
diff --git a/test/sbom/testdata/opensuse-leap-15-5-cli.txt b/test/sbom/testdata/opensuse-leap-15-5-cli.txt
new file mode 100644
index 0000000000..340376cd4f
--- /dev/null
+++ b/test/sbom/testdata/opensuse-leap-15-5-cli.txt
@@ -0,0 +1,141 @@
+rpm/aaa_base/84.87+git20180409.04c9dae-150300.10.6.2
+rpm/bash/4.4-150400.25.22
+rpm/bash-sh/4.4-150400.25.22
+rpm/boost-license1_66_0/1.66.0-12.3.1
+rpm/ca-certificates/2+git20210309.21162a6-2.1
+rpm/ca-certificates-mozilla/2.62-150200.30.1
+rpm/coreutils/8.32-150400.7.5
+rpm/cpio/2.13-150400.1.98
+rpm/cracklib/2.9.7-11.6.1
+rpm/cracklib-dict-small/2.9.7-11.6.1
+rpm/crypto-policies/20210917.c9d86d1-150400.3.6.1
+rpm/curl/8.0.1-150400.5.36.1
+rpm/diffutils/3.6-4.3.1
+rpm/file-magic/5.32-7.14.1
+rpm/filesystem/15.0-11.8.1
+rpm/fillup/1.42-2.18
+rpm/findutils/4.8.0-1.20
+rpm/gawk/4.2.1-150000.3.3.1
+rpm/glibc/2.31-150300.63.1
+rpm/gpg-pubkey/25db7ae0-645bae34
+rpm/gpg-pubkey/29b700a4-62b07e22
+rpm/gpg-pubkey/39db7c82-5f68629b
+rpm/gpg-pubkey/3dbdc284-53674dd4
+rpm/gpg-pubkey/3fa1d6ce-63c9481c
+rpm/gpg-pubkey/65176565-61a0ee8f
+rpm/gpg2/2.2.27-150300.3.8.1
+rpm/grep/3.1-150000.4.6.1
+rpm/info/6.5-4.17
+rpm/krb5/1.20.1-150500.3.3.1
+rpm/kubic-locale-archive/2.31-10.36
+rpm/libacl1/2.2.52-4.3.1
+rpm/libassuan0/2.5.5-150000.4.5.2
+rpm/libattr1/2.4.47-2.19
+rpm/libaudit1/3.0.6-150400.4.13.1
+rpm/libaugeas0/1.12.0-150400.3.3.6
+rpm/libblkid1/2.37.4-150500.7.16
+rpm/libboost_system1_66_0/1.66.0-12.3.1
+rpm/libboost_thread1_66_0/1.66.0-12.3.1
+rpm/libbrotlicommon1/1.0.7-3.3.1
+rpm/libbrotlidec1/1.0.7-3.3.1
+rpm/libbz2-1/1.0.8-150400.1.122
+rpm/libcap-ng0/0.7.9-4.37
+rpm/libcap2/2.63-150400.3.3.1
+rpm/libcom_err2/1.46.4-150400.3.3.1
+rpm/libcrack2/2.9.7-11.6.1
+rpm/libcrypt1/4.4.15-150300.4.4.3
+rpm/libcurl4/8.0.1-150400.5.36.1
+rpm/libdw1/0.185-150400.5.3.1
+rpm/libeconf0/0.5.2-150400.3.6.1
+rpm/libelf1/0.185-150400.5.3.1
+rpm/libfdisk1/2.37.4-150500.7.16
+rpm/libffi7/3.2.1.git259-10.8
+rpm/libgcc_s1/13.2.1+git7813-150000.1.6.1
+rpm/libgcrypt20/1.9.4-150500.10.19
+rpm/libgcrypt20-hmac/1.9.4-150500.10.19
+rpm/libglib-2_0-0/2.70.5-150400.3.8.1
+rpm/libgmp10/6.1.2-4.9.1
+rpm/libgpg-error0/1.42-150400.1.101
+rpm/libgpgme11/1.16.0-150400.1.80
+rpm/libidn2-0/2.2.0-3.6.1
+rpm/libjitterentropy3/3.4.0-150000.1.9.1
+rpm/libkeyutils1/1.6.3-5.6.1
+rpm/libksba8/1.3.5-150000.4.6.1
+rpm/libldap-2_4-2/2.4.46-150200.14.17.1
+rpm/libldap-data/2.4.46-150200.14.17.1
+rpm/liblua5_3-5/5.3.6-3.6.1
+rpm/liblz4-1/1.9.3-150400.1.7
+rpm/liblzma5/5.2.3-150000.4.7.1
+rpm/libmagic1/5.32-7.14.1
+rpm/libmount1/2.37.4-150500.7.16
+rpm/libncurses6/6.1-150000.5.20.1
+rpm/libnghttp2-14/1.40.0-150200.12.1
+rpm/libnpth0/1.5-2.11
+rpm/libnsl2/1.2.0-2.44
+rpm/libopenssl1_1/1.1.1l-150500.17.22.1
+rpm/libopenssl1_1-hmac/1.1.1l-150500.17.22.1
+rpm/libp11-kit0/0.23.22-150500.8.3.1
+rpm/libpcre1/8.45-150000.20.13.1
+rpm/libpopt0/1.16-3.22
+rpm/libprocps7/3.3.15-150000.7.34.1
+rpm/libprotobuf-lite20/3.9.2-150200.4.21.1
+rpm/libproxy1/0.4.17-150400.1.8
+rpm/libpsl5/0.20.1-150000.3.3.1
+rpm/libreadline7/7.0-150400.25.22
+rpm/libsasl2-3/2.1.28-150500.1.1
+rpm/libselinux1/3.1-150400.1.69
+rpm/libsemanage1/3.1-150400.1.65
+rpm/libsepol1/3.1-150400.1.70
+rpm/libsigc-2_0-0/2.10.7-150400.3.3.1
+rpm/libsmartcols1/2.37.4-150500.7.16
+rpm/libsolv-tools/0.7.24-150400.3.8.1
+rpm/libsqlite3-0/3.44.0-150000.3.23.1
+rpm/libssh-config/0.9.6-150400.1.5
+rpm/libssh4/0.9.6-150400.1.5
+rpm/libstdc++6/13.2.1+git7813-150000.1.6.1
+rpm/libsystemd0/249.16-150400.8.35.5
+rpm/libtasn1/4.13-150000.4.8.1
+rpm/libtasn1-6/4.13-150000.4.8.1
+rpm/libtirpc-netconfig/1.3.4-150300.3.23.1
+rpm/libtirpc3/1.3.4-150300.3.23.1
+rpm/libudev1/249.16-150400.8.35.5
+rpm/libunistring2/0.9.10-1.1
+rpm/libusb-1_0-0/1.0.24-150400.3.3.1
+rpm/libutempter0/1.1.6-3.42
+rpm/libuuid1/2.37.4-150500.7.16
+rpm/libverto1/0.2.6-3.20
+rpm/libxml2-2/2.10.3-150500.5.11.1
+rpm/libyaml-cpp0_6/0.6.3-150400.4.3.1
+rpm/libz1/1.2.13-150500.4.3.1
+rpm/libzck1/1.1.16-150400.3.7.1
+rpm/libzio1/1.06-2.20
+rpm/libzstd1/1.5.0-150400.3.3.1
+rpm/libzypp/17.31.22-150400.3.43.1
+rpm/login_defs/4.8.1-150400.10.12.1
+rpm/ncurses-utils/6.1-150000.5.20.1
+rpm/netcfg/11.6-3.3.1
+rpm/openSUSE-build-key/1.0-lp155.7.3.1
+rpm/openSUSE-release/15.5-lp155.288.1
+rpm/openSUSE-release-appliance-docker/15.5-lp155.288.1
+rpm/openssl-1_1/1.1.1l-150500.17.22.1
+rpm/p11-kit/0.23.22-150500.8.3.1
+rpm/p11-kit-tools/0.23.22-150500.8.3.1
+rpm/pam/1.3.0-150000.6.61.1
+rpm/patterns-base-fips/20200505-lp155.10.5
+rpm/perl-base/5.26.1-150300.17.14.1
+rpm/permissions/20201225-150400.5.16.1
+rpm/pinentry/1.1.0-4.3.1
+rpm/procps/3.3.15-150000.7.34.1
+rpm/rpm-config-SUSE/1-150400.14.3.1
+rpm/rpm-ndb/4.14.3-150400.59.3.1
+rpm/sed/4.4-11.6
+rpm/shadow/4.8.1-150400.10.12.1
+rpm/system-group-hardware/20170617-150400.24.2.1
+rpm/system-user-root/20190513-3.3.1
+rpm/sysuser-shadow/3.2-150400.3.5.3
+rpm/terminfo-base/6.1-150000.5.20.1
+rpm/timezone/2023c-150000.75.23.1
+rpm/update-alternatives/1.19.0.4-150000.4.4.1
+rpm/util-linux/2.37.4-150500.7.16
+rpm/zypper/1.14.66-150400.3.35.1
+
diff --git a/test/sbom/testdata/opensuse-leap-42-3-cli.txt b/test/sbom/testdata/opensuse-leap-42-3-cli.txt
new file mode 100644
index 0000000000..0e90be1c43
--- /dev/null
+++ b/test/sbom/testdata/opensuse-leap-42-3-cli.txt
@@ -0,0 +1,136 @@
+rpm/aaa_base/13.2+git20140911.61c1681-28.9.1
+rpm/acl/2.2.52-11.3.1
+rpm/bash/4.3-83.15.1
+rpm/blog/2.19-3.3.1
+rpm/bzip2/1.0.6-34.15
+rpm/ca-certificates/1_201403302107-12.3
+rpm/ca-certificates-mozilla/2.30-21.1
+rpm/coreutils/8.25-5.1
+rpm/cpio/2.11-38.3.1
+rpm/cracklib/2.9.0-9.15
+rpm/cracklib-dict-small/2.9.0-9.15
+rpm/device-mapper/1.02.97-80.1
+rpm/diffutils/3.3-10.3
+rpm/dirmngr/1.1.1-18.1
+rpm/elfutils/0.158-12.15
+rpm/expat/2.1.0-24.1
+rpm/file/5.22-16.1
+rpm/file-magic/5.22-16.1
+rpm/filesystem/13.1-9.5
+rpm/fillup/1.42-275.3
+rpm/findutils/4.5.12-13.15
+rpm/gawk/4.1.3-7.15
+rpm/glibc/2.22-25.1
+rpm/gpg-pubkey/307e3d54-5aaa90a5
+rpm/gpg-pubkey/3dbdc284-53674dd4
+rpm/gpg-pubkey/39db7c82-5847eb1f
+rpm/gpg2/2.0.24-9.3.1
+rpm/grep/2.16-7.3
+rpm/gzip/1.6-14.1
+rpm/hardlink/1.0-11.3
+rpm/info/4.13a-42.18
+rpm/insserv-compat/0.1-18.2
+rpm/iputils/s20121221-6.3
+rpm/kbd-legacy/2.0.3-3.14
+rpm/kmod-compat/17-19.1
+rpm/krb5/1.12.5-25.1
+rpm/libacl1/2.2.52-11.3.1
+rpm/libadns1/1.4-106.3
+rpm/libaio1/0.3.109-22.3
+rpm/libapparmor1/2.10.4-19.1
+rpm/libasm1/0.158-12.15
+rpm/libassuan0/2.1.1-6.13
+rpm/libattr1/2.4.47-8.15
+rpm/libaudit1/2.3.6-8.1
+rpm/libaugeas0/1.2.0-13.3.1
+rpm/libblkid1/2.29.2-8.1
+rpm/libbz2-1/1.0.6-34.15
+rpm/libcap-ng0/0.7.3-6.15
+rpm/libcap2/2.22-18.16
+rpm/libcom_err2/1.42.11-15.1
+rpm/libcrack2/2.9.0-9.15
+rpm/libcryptsetup4/1.6.4-7.5
+rpm/libcurl4/7.37.0-51.1
+rpm/libdbus-1-3/1.8.22-5.1
+rpm/libdw1/0.158-12.15
+rpm/libelf1/0.158-12.15
+rpm/libexpat1/2.1.0-24.1
+rpm/libfdisk1/2.29.2-8.1
+rpm/libffi4/5.3.1+r233831-10.1
+rpm/libfipscheck1/1.2.0-10.3
+rpm/libgcc_s1/8.2.1+r264010-2.3
+rpm/libgcrypt20/1.6.1-48.1
+rpm/libgmp10/5.1.3-7.15
+rpm/libgpg-error0/1.27-1.3
+rpm/libidn11/1.28-9.6.1
+rpm/libkeyutils1/1.5.9-7.13
+rpm/libkmod2/17-19.1
+rpm/libksba8/1.3.0-10.4
+rpm/libldap-2_4-2/2.4.44-18.1
+rpm/liblua5_1/5.1.5-16.1
+rpm/liblzma5/5.2.2-3.15
+rpm/libmagic1/5.22-16.1
+rpm/libmodman1/2.0.1-20.3
+rpm/libmount1/2.29.2-8.1
+rpm/libncurses5/5.9-70.1
+rpm/libncurses6/5.9-70.1
+rpm/libopenssl1_0_0/1.0.2j-38.1
+rpm/libp11-kit0/0.20.7-1.2
+rpm/libpcre1/8.39-11.1
+rpm/libpopt0/1.16-31.15
+rpm/libprocps3/3.3.9-23.1
+rpm/libproxy1/0.4.13-4.3
+rpm/libpth20/2.0.7-144.3
+rpm/libqrencode3/3.4.3-7.5
+rpm/libreadline6/6.3-83.15.1
+rpm/libsasl2-3/2.1.26-14.1
+rpm/libseccomp2/2.3.1-6.3
+rpm/libselinux1/2.5-4.17
+rpm/libsemanage1/2.5-6.3.1
+rpm/libsepol1/2.5-3.15
+rpm/libsgutils2-2/1.43+46.4b09c76-21.1
+rpm/libsmartcols1/2.29.2-8.1
+rpm/libsolv-tools/0.6.34-9.1
+rpm/libssh2-1/1.4.3-19.9.1
+rpm/libstdc++6/8.2.1+r264010-2.3
+rpm/libsystemd0/228-71.1
+rpm/libtasn1/4.9-6.1
+rpm/libtasn1-6/4.9-6.1
+rpm/libudev1/228-71.1
+rpm/libusb-0_1-4/0.1.13-34.3
+rpm/libusb-1_0-0/1.0.20-5.5
+rpm/libustr-1_0-1/1.0.4-37.15
+rpm/libutempter0/1.1.6-9.16
+rpm/libuuid1/2.29.2-8.1
+rpm/libverto1/0.2.6-10.3
+rpm/libxml2-2/2.9.4-18.1
+rpm/libz1/1.2.8-14.3.1
+rpm/libzio1/1.00-14.15
+rpm/libzypp/16.19.0-30.1
+rpm/ncurses-utils/5.9-70.1
+rpm/netcfg/11.5-30.3
+rpm/openSUSE-build-key/1.0-36.3.1
+rpm/openSUSE-release/42.3-2.1
+rpm/openSUSE-release-ftp/42.3-2.1
+rpm/openssl/1.0.2j-38.1
+rpm/p11-kit/0.20.7-1.2
+rpm/p11-kit-tools/0.20.7-1.2
+rpm/pam/1.3.0-19.1
+rpm/pam-config/0.91-3.3
+rpm/perl-base/5.18.2-15.2
+rpm/permissions/2015.09.28.1626-22.1
+rpm/pigz/2.3-8.3
+rpm/procps/3.3.9-23.1
+rpm/rpm/4.11.2-14.13.1
+rpm/sed/4.2.2-11.1
+rpm/shadow/4.2.1-20.1
+rpm/suse-module-tools/12.4-5.3
+rpm/systemd/228-71.1
+rpm/systemd-presets-branding-openSUSE/12.2-1.3
+rpm/sysvinit-tools/2.88+-103.3.1
+rpm/terminfo-base/5.9-70.1
+rpm/update-alternatives/1.18.4-4.15
+rpm/util-linux/2.29.2-8.1
+rpm/xz/5.2.2-3.15
+rpm/zypper/1.13.45-20.1
+
diff --git a/test/sbom/testdata/opensuse-tumbleweed-cli.txt b/test/sbom/testdata/opensuse-tumbleweed-cli.txt
new file mode 100644
index 0000000000..4f6bccaad0
--- /dev/null
+++ b/test/sbom/testdata/opensuse-tumbleweed-cli.txt
@@ -0,0 +1,148 @@
+rpm/aaa_base/84.87+git20231023.f347d36-1.2
+rpm/alts/1.2+30.a5431e9-1.4
+rpm/bash/5.2.26-10.3
+rpm/bash-sh/5.2.26-10.3
+rpm/boost-license1_84_0/1.84.0-1.2
+rpm/branding-openSUSE/84.87.20230227-3.6
+rpm/ca-certificates/2+git20230406.2dae8b7-1.3
+rpm/ca-certificates-mozilla/2.62-2.2
+rpm/chkstat/1699_20240206-1.1
+rpm/coreutils/9.4-4.1
+rpm/cracklib-dict-small/2.9.11-1.3
+rpm/crypto-policies/20230920.570ea89-3.1
+rpm/curl/8.6.0-1.2
+rpm/dbus-1/1.14.10-2.2
+rpm/dbus-1-common/1.14.10-2.2
+rpm/dbus-1-daemon/1.14.10-2.2
+rpm/dbus-1-tools/1.14.10-2.2
+rpm/diffutils/3.10-1.6
+rpm/file-magic/5.45-1.5
+rpm/filesystem/84.87-15.2
+rpm/fillup/1.42-280.2
+rpm/findutils/4.9.0-3.3
+rpm/gio-branding-openSUSE/42.1-20.9
+rpm/glib2-tools/2.78.3-1.2
+rpm/glibc/2.39-2.1
+rpm/glibc-locale-base/2.39-2.1
+rpm/gpg-pubkey/29b700a4-62b07e22
+rpm/gpg-pubkey/39db7c82-510a966b
+rpm/gpg2/2.4.4-1.2
+rpm/grep/3.11-2.3
+rpm/gzip/1.13-2.2
+rpm/krb5/1.21.2-1.2
+rpm/libabsl2308_0_0/20230802.1-3.1
+rpm/libacl1/2.3.1-2.13
+rpm/libalternatives1/1.2+30.a5431e9-1.4
+rpm/libassuan0/2.5.6-1.3
+rpm/libattr1/2.5.1-1.29
+rpm/libaudit1/3.1.1-1.5
+rpm/libaugeas0/1.14.1-1.2
+rpm/libblkid1/2.39.3-3.3
+rpm/libboost_thread1_84_0/1.84.0-1.2
+rpm/libbrotlicommon1/1.1.0-1.2
+rpm/libbrotlidec1/1.1.0-1.2
+rpm/libbz2-1/1.0.8-5.9
+rpm/libcap-ng0/0.8.4-1.2
+rpm/libcap2/2.69-1.6
+rpm/libcom_err2/1.47.0-3.2
+rpm/libcrypt1/4.4.36-1.5
+rpm/libcurl4/8.6.0-1.2
+rpm/libdbus-1-3/1.14.10-2.2
+rpm/libduktape207/2.7.0-3.2
+rpm/libeconf0/0.6.1-1.3
+rpm/libelf1/0.190-1.2
+rpm/libexpat1/2.5.0-2.7
+rpm/libfa1/1.14.1-1.2
+rpm/libfdisk1/2.39.3-3.3
+rpm/libffi8/3.4.4-2.2
+rpm/libgcc_s1/13.2.1+git8285-1.1
+rpm/libgcrypt20/1.10.3-3.2
+rpm/libgio-2_0-0/2.78.3-1.2
+rpm/libglib-2_0-0/2.78.3-1.2
+rpm/libgmodule-2_0-0/2.78.3-1.2
+rpm/libgmp10/6.3.0-2.3
+rpm/libgobject-2_0-0/2.78.3-1.2
+rpm/libgpg-error0/1.47-2.2
+rpm/libgpgme11/1.23.2-3.4
+rpm/libidn2-0/2.3.7-1.1
+rpm/libkeyutils1/1.6.3-6.4
+rpm/libksba8/1.6.5-1.2
+rpm/libldap2/2.6.6-1.3
+rpm/liblua5_4-5/5.4.6-3.2
+rpm/liblz4-1/1.9.4-2.7
+rpm/liblzma5/5.4.6-1.2
+rpm/libmagic1/5.45-1.5
+rpm/libmount1/2.39.3-3.3
+rpm/libncurses6/6.4.20240120-30.2
+rpm/libnghttp2-14/1.59.0-1.2
+rpm/libnpth0/1.6-2.12
+rpm/libnss_usrfiles2/2.27-3.17
+rpm/libopenssl-3-fips-provider/3.1.4-4.1
+rpm/libopenssl3/3.1.4-4.1
+rpm/libp11-kit0/0.25.3-1.2
+rpm/libpcre2-8-0/10.42-3.13
+rpm/libpopt0/1.19-1.7
+rpm/libprocps8/3.3.17-16.2
+rpm/libprotobuf-lite25_1_0/25.1-9.4
+rpm/libproxy1/0.5.3-1.2
+rpm/libpsl5/0.21.2-1.6
+rpm/libpxbackend-1_0/0.5.3-1.2
+rpm/libreadline8/8.2.10-1.2
+rpm/libsasl2-3/2.1.28-6.2
+rpm/libselinux1/3.6-1.2
+rpm/libsemanage-conf/3.6-1.3
+rpm/libsemanage2/3.6-1.3
+rpm/libsepol2/3.6-1.2
+rpm/libsigc-2_0-0/2.12.1-2.2
+rpm/libsmartcols1/2.39.3-3.3
+rpm/libsolv-tools/0.7.28-1.5
+rpm/libsqlite3-0/3.44.2-1.2
+rpm/libssh-config/0.10.6-1.2
+rpm/libssh4/0.10.6-1.2
+rpm/libstdc++6/13.2.1+git8285-1.1
+rpm/libsubid4/4.14.3-1.3
+rpm/libsystemd0/254.8-4.1
+rpm/libtasn1-6/4.19.0-1.6
+rpm/libudev1/254.8-4.1
+rpm/libunistring5/1.1-3.2
+rpm/libusb-1_0-0/1.0.27-1.1
+rpm/libuuid1/2.39.3-3.3
+rpm/libverto1/0.3.2-3.2
+rpm/libxml2-2/2.11.6-2.1
+rpm/libyaml-cpp0_8/0.8.0-1.2
+rpm/libz1/1.3-1.2
+rpm/libzck1/1.4.0-1.2
+rpm/libzstd1/1.5.5-5.2
+rpm/libzypp/17.31.31-1.1
+rpm/login_defs/4.14.3-1.3
+rpm/lsb-release/3.3-1.2
+rpm/ncurses-utils/6.4.20240120-30.2
+rpm/netcfg/11.6-13.2
+rpm/openSUSE-build-key/1.0-48.2
+rpm/openSUSE-release/20240212-2740.1
+rpm/openSUSE-release-appliance-docker/20240212-2740.1
+rpm/openssl/3.1.4-2.2
+rpm/openssl-3/3.1.4-4.1
+rpm/p11-kit/0.25.3-1.2
+rpm/p11-kit-tools/0.25.3-1.2
+rpm/pam/1.6.0-3.1
+rpm/patterns-base-fips/20200505-47.1
+rpm/patterns-base-minimal_base/20200505-47.1
+rpm/permissions/1699_20240206-1.1
+rpm/permissions-config/1699_20240206-1.1
+rpm/pinentry/1.2.1-3.4
+rpm/procps/3.3.17-16.2
+rpm/rpm/4.19.1-3.1
+rpm/rpm-config-SUSE/20240118-1.2
+rpm/sed/4.9-2.5
+rpm/shadow/4.14.3-1.3
+rpm/shared-mime-info/2.4-1.2
+rpm/system-user-root/20190513-2.15
+rpm/sysuser-shadow/3.2-2.2
+rpm/tar/1.35-1.2
+rpm/terminfo-base/6.4.20240120-30.2
+rpm/timezone/2024a-1.1
+rpm/util-linux/2.39.3-3.3
+rpm/xz/5.4.6-1.2
+rpm/zypper/1.14.68-1.3
+
diff --git a/test/sbom/testdata/oraclelinux-8-9-cli.txt b/test/sbom/testdata/oraclelinux-8-9-cli.txt
new file mode 100644
index 0000000000..85c36f900e
--- /dev/null
+++ b/test/sbom/testdata/oraclelinux-8-9-cli.txt
@@ -0,0 +1,208 @@
+rpm/acl/2.2.53-1.el8
+rpm/audit-libs/3.0.7-5.el8
+rpm/basesystem/11-5.el8
+rpm/bash/4.4.20-4.el8_6
+rpm/bind-export-libs/32:9.11.36-11.el8_9
+rpm/brotli/1.0.6-3.el8
+rpm/bzip2-libs/1.0.6-26.el8
+rpm/ca-certificates/2023.2.60_v7.0.306-80.0.el8_8
+rpm/chkconfig/1.19.2-1.0.1.el8
+rpm/coreutils/8.30-15.0.1.el8
+rpm/coreutils-common/8.30-15.0.1.el8
+rpm/cracklib/2.9.6-15.el8
+rpm/cracklib-dicts/2.9.6-15.el8
+rpm/crypto-policies/20230731-1.git3177e06.el8
+rpm/cryptsetup-libs/2.3.7-7.el8
+rpm/curl/7.61.1-33.el8
+rpm/cyrus-sasl-lib/2.1.27-6.el8_5
+rpm/dbus/1:1.12.8-26.0.1.el8
+rpm/dbus-common/1:1.12.8-26.0.1.el8
+rpm/dbus-daemon/1:1.12.8-26.0.1.el8
+rpm/dbus-glib/0.110-2.el8
+rpm/dbus-libs/1:1.12.8-26.0.1.el8
+pypi/dbus-python/1.2.4 /usr/lib64/python3.6/site-packages/dbus_python-1.2.4-py3.6.egg-info/PKG-INFO
+rpm/dbus-tools/1:1.12.8-26.0.1.el8
+rpm/device-mapper/8:1.02.181-13.0.2.el8_9
+rpm/device-mapper-event/8:1.02.181-13.0.2.el8_9
+rpm/device-mapper-event-libs/8:1.02.181-13.0.2.el8_9
+rpm/device-mapper-libs/8:1.02.181-13.0.2.el8_9
+rpm/device-mapper-multipath/0.8.4-39.el8
+rpm/device-mapper-multipath-libs/0.8.4-39.el8
+rpm/device-mapper-persistent-data/0.9.0-7.el8
+rpm/dhcp-client/12:4.3.6-49.el8
+rpm/dhcp-common/12:4.3.6-49.el8
+rpm/dhcp-libs/12:4.3.6-49.el8
+rpm/diffutils/3.6-6.el8
+rpm/dnf/4.7.0-19.0.1.el8
+rpm/dnf-data/4.7.0-19.0.1.el8
+rpm/dnf-plugins-core/4.0.21-23.0.1.el8
+rpm/elfutils-default-yama-scope/0.189-3.el8
+rpm/elfutils-libelf/0.189-3.el8
+rpm/elfutils-libs/0.189-3.el8
+rpm/expat/2.2.5-11.0.1.el8
+rpm/file-libs/5.33-25.el8
+rpm/filesystem/3.8-6.el8
+rpm/findutils/1:4.6.0-21.el8
+rpm/gawk/4.2.1-4.el8
+rpm/gdbm/1:1.18-2.el8
+rpm/gdbm-libs/1:1.18-2.el8
+rpm/glib2/2.56.4-161.el8
+rpm/glibc/2.28-236.0.1.el8.7
+rpm/glibc-common/2.28-236.0.1.el8.7
+rpm/glibc-langpack-en/2.28-236.0.1.el8.7
+rpm/gmp/1:6.1.2-10.el8
+rpm/gnupg2/2.2.20-3.el8_6
+rpm/gnutls/3.6.16-8.el8_9.1
+pypi/gpg/1.13.1 /usr/lib64/python3.6/site-packages/gpg-1.13.1-py3.6.egg-info
+rpm/gpg-pubkey/ad986da3-5cabf60d
+rpm/gpgme/1.13.1-11.el8
+rpm/grep/3.1-6.el8
+rpm/gzip/1.9-13.el8_5
+rpm/ima-evm-utils/1.3.2-12.el8
+rpm/info/6.5-7.el8
+rpm/initscripts/10.00.18-1.0.1.el8
+rpm/ipcalc/0.2.4-4.el8
+rpm/iproute/6.2.0-5.el8_9
+rpm/iputils/20180629-11.el8
+rpm/json-c/0.13.1-3.el8
+rpm/keyutils-libs/1.5.10-9.el8
+rpm/kmod/25-19.0.2.el8
+rpm/kmod-libs/25-19.0.2.el8
+rpm/kpartx/0.8.4-39.el8
+rpm/krb5-libs/1.18.2-26.0.1.el8_9
+rpm/libacl/2.2.53-1.el8
+rpm/libaio/0.3.112-1.el8
+rpm/libarchive/3.3.3-5.el8
+rpm/libassuan/2.5.1-3.el8
+rpm/libattr/2.4.48-3.el8
+rpm/libblkid/2.32.1-43.0.1.el8
+rpm/libbpf/2:0.6.0-6.0.1.el8
+rpm/libcap/2.48-6.el8_9
+rpm/libcap-ng/0.7.11-1.el8
+rpm/libcom_err/1.46.2-2.el8
+pypi/libcomps/0.1.18 /usr/lib64/python3.6/site-packages/libcomps-0.1.18-py3.6.egg-info/PKG-INFO
+rpm/libcomps/0.1.18-1.el8
+rpm/libcurl/7.61.1-33.el8
+rpm/libdb/5.3.28-42.0.1.el8_4
+rpm/libdb-utils/5.3.28-42.0.1.el8_4
+rpm/libdnf/0.63.0-17.0.1.el8_9
+rpm/libedit/3.1-23.20170329cvs.el8
+rpm/libestr/0.1.10-3.el8
+rpm/libfastjson/0.99.9-2.el8
+rpm/libfdisk/2.32.1-43.0.1.el8
+rpm/libffi/3.1-24.el8
+rpm/libgcc/8.5.0-20.0.2.el8
+rpm/libgcrypt/1.8.5-7.el8_6
+rpm/libgpg-error/1.31-1.el8
+rpm/libidn2/2.2.0-1.el8
+rpm/libksba/1.3.5-9.el8_7
+rpm/libmnl/1.0.4-6.el8
+rpm/libmodulemd/2.13.0-1.el8
+rpm/libmount/2.32.1-43.0.1.el8
+rpm/libnghttp2/1.33.0-5.el8_9
+rpm/libnsl2/1.2.0-2.20180605git4a062cf.el8
+rpm/libpsl/0.20.2-6.el8
+rpm/libpwquality/1.4.4-6.el8
+rpm/librepo/1.14.2-4.el8
+rpm/libreport-filesystem/2.9.5-15.0.4.el8
+rpm/libseccomp/2.5.2-1.el8
+rpm/libselinux/2.9-8.el8
+rpm/libselinux-utils/2.9-8.el8
+rpm/libsemanage/2.9-9.el8_6
+rpm/libsepol/2.9-3.el8
+rpm/libsigsegv/2.11-5.el8
+rpm/libsmartcols/2.32.1-43.0.1.el8
+rpm/libsolv/0.7.20-6.el8
+rpm/libssh/0.9.6-13.el8_9
+rpm/libssh-config/0.9.6-13.el8_9
+rpm/libstdc++/8.5.0-20.0.2.el8
+rpm/libtasn1/4.13-4.el8_7
+rpm/libtirpc/1.1.4-8.el8
+rpm/libunistring/0.9.9-3.el8
+rpm/libusbx/1.0.23-4.el8
+rpm/libuser/0.62-25.el8
+rpm/libutempter/1.1.6-14.el8
+rpm/libuuid/2.32.1-43.0.1.el8
+rpm/libverto/0.3.2-2.el8
+rpm/libxcrypt/4.1.1-6.el8
+rpm/libxml2/2.9.7-18.el8_9
+rpm/libyaml/0.1.7-5.el8
+rpm/libzstd/1.4.4-1.0.1.el8
+rpm/logrotate/3.14.0-6.el8
+rpm/lua-libs/5.3.4-12.el8
+rpm/lvm2/8:2.03.14-13.0.2.el8_9
+rpm/lvm2-libs/8:2.03.14-13.0.2.el8_9
+rpm/lz4-libs/1.8.3-3.el8_4
+rpm/mpfr/3.1.6-1.el8
+rpm/ncurses/6.1-10.20180224.el8
+rpm/ncurses-base/6.1-10.20180224.el8
+rpm/ncurses-libs/6.1-10.20180224.el8
+rpm/nettle/3.4.1-7.el8
+rpm/npth/1.5-4.el8
+rpm/openldap/2.4.46-18.el8
+rpm/openssh/8.0p1-19.el8_8
+rpm/openssh-clients/8.0p1-19.el8_8
+rpm/openssh-server/8.0p1-19.el8_8
+rpm/openssl-libs/1:1.1.1k-12.el8_9
+rpm/oraclelinux-release/8:8.9-1.0.8.el8
+rpm/oraclelinux-release-el8/1.0-35.el8
+rpm/p11-kit/0.23.22-1.el8
+rpm/p11-kit-trust/0.23.22-1.el8
+rpm/pam/1.3.1-27.el8
+rpm/passwd/0.80-4.el8
+rpm/pcre/8.42-6.el8
+rpm/pcre2/10.32-3.el8_6
+rpm/platform-python/3.6.8-56.0.1.el8_9.3
+rpm/platform-python-setuptools/39.2.0-7.el8
+rpm/policycoreutils/2.9-24.0.1.el8
+rpm/popt/1.18-1.el8
+rpm/procps-ng/3.3.15-14.0.1.el8
+rpm/psmisc/23.1-5.el8
+rpm/publicsuffix-list-dafsa/20180723-1.el8
+pypi/python-dateutil/2.6.1 /usr/lib/python3.6/site-packages/python_dateutil-2.6.1-py3.6.egg-info/PKG-INFO
+pypi/python-dateutil/2.6.1 /usr/lib/python3.6/site-packages/python_dateutil-2.6.1-py3.6.egg-info/PKG-INFO
+rpm/python3-dateutil/1:2.6.1-6.el8
+rpm/python3-dbus/1.2.4-15.el8
+rpm/python3-dnf/4.7.0-19.0.1.el8
+rpm/python3-dnf-plugins-core/4.0.21-23.0.1.el8
+rpm/python3-gpg/1.13.1-11.el8
+rpm/python3-hawkey/0.63.0-17.0.1.el8_9
+rpm/python3-libcomps/0.1.18-1.el8
+rpm/python3-libdnf/0.63.0-17.0.1.el8_9
+rpm/python3-libs/3.6.8-56.0.1.el8_9.3
+rpm/python3-pip-wheel/9.0.3-23.el8
+rpm/python3-rpm/4.14.3-28.0.2.el8_9
+rpm/python3-setuptools-wheel/39.2.0-7.el8
+rpm/python3-six/1.11.0-8.el8
+rpm/python3-systemd/234-8.el8
+rpm/readline/7.0-10.el8
+rpm/redhat-release/2:8.9-0.1.0.1.el8
+rpm/rootfiles/8.1-22.el8
+pypi/rpm/4.14.3 /usr/lib64/python3.6/site-packages/rpm-4.14.3-py3.6.egg-info
+rpm/rpm/4.14.3-28.0.2.el8_9
+rpm/rpm-build-libs/4.14.3-28.0.2.el8_9
+rpm/rpm-libs/4.14.3-28.0.2.el8_9
+rpm/rsyslog/8.2102.0-15.el8
+rpm/sed/4.5-5.el8
+rpm/setup/2.12.2-9.el8
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+rpm/shadow-utils/2:4.6-19.el8
+pypi/six/1.11.0 /usr/lib/python3.6/site-packages/six-1.11.0.dist-info/METADATA
+pypi/six/1.11.0 /usr/lib/python3.6/site-packages/six-1.11.0.dist-info/METADATA
+rpm/sqlite-libs/3.26.0-19.0.1.el8_9
+rpm/systemd/239-78.0.3.el8
+rpm/systemd-libs/239-78.0.3.el8
+rpm/systemd-pam/239-78.0.3.el8
+pypi/systemd-python/234 /usr/lib64/python3.6/site-packages/systemd_python-234-py3.6.egg-info
+rpm/tar/2:1.30-9.el8
+rpm/tpm2-tss/2.3.2-5.el8
+rpm/tzdata/2023d-1.0.1.el8
+rpm/userspace-rcu/0.10.1-4.el8
+rpm/util-linux/2.32.1-43.0.1.el8
+rpm/vim-minimal/2:8.0.1763-19.0.1.el8_6.4
+rpm/xz-libs/5.2.4-4.el8_6
+rpm/yum/4.7.0-19.0.1.el8
+rpm/yum-utils/4.0.21-23.0.1.el8
+rpm/zlib/1.2.11-25.el8
+
diff --git a/test/sbom/testdata/oraclelinux-9-cli.txt b/test/sbom/testdata/oraclelinux-9-cli.txt
new file mode 100644
index 0000000000..7edf8c0dc9
--- /dev/null
+++ b/test/sbom/testdata/oraclelinux-9-cli.txt
@@ -0,0 +1,193 @@
+rpm/acl/2.3.1-3.el9
+rpm/alternatives/1.24-1.0.1.el9
+rpm/audit-libs/3.0.7-104.el9
+rpm/basesystem/11-13.el9
+rpm/bash/5.1.8-6.el9_1
+rpm/bzip2-libs/1.0.8-8.el9
+rpm/ca-certificates/2023.2.60_v7.0.306-90.1.el9_2
+rpm/chkconfig/1.24-1.0.1.el9
+rpm/coreutils/8.32-34.0.1.el9
+rpm/coreutils-common/8.32-34.0.1.el9
+rpm/cracklib/2.9.6-27.el9
+rpm/cracklib-dicts/2.9.6-27.el9
+rpm/crypto-policies/20230731-1.git94f0e2c.el9_3.1
+rpm/curl/7.76.1-26.el9_3.2
+rpm/cyrus-sasl-lib/2.1.27-21.el9
+rpm/dbus/1:1.12.20-8.0.1.el9
+rpm/dbus-broker/28-7.el9
+rpm/dbus-common/1:1.12.20-8.0.1.el9
+rpm/dbus-libs/1:1.12.20-8.0.1.el9
+pypi/dbus-python/1.2.18 /usr/lib64/python3.9/site-packages/dbus_python-1.2.18-py3.9.egg-info/PKG-INFO
+rpm/dhcp-client/12:4.4.2-19.b1.el9
+rpm/dhcp-common/12:4.4.2-19.b1.el9
+rpm/diffutils/3.7-12.el9
+rpm/dnf/4.14.0-8.0.1.el9
+rpm/dnf-data/4.14.0-8.0.1.el9
+rpm/dnf-plugins-core/4.3.0-11.0.1.el9_3
+rpm/elfutils-default-yama-scope/0.189-3.el9
+rpm/elfutils-libelf/0.189-3.el9
+rpm/elfutils-libs/0.189-3.el9
+rpm/expat/2.5.0-1.el9
+rpm/file-libs/5.39-14.el9
+rpm/filesystem/3.16-2.el9
+rpm/findutils/1:4.8.0-6.el9
+rpm/gawk/5.1.0-6.el9
+rpm/gdbm-libs/1:1.19-4.el9
+rpm/glib2/2.68.4-11.el9
+rpm/glibc/2.34-83.0.1.el9_3.7
+rpm/glibc-common/2.34-83.0.1.el9_3.7
+rpm/glibc-langpack-en/2.34-83.0.1.el9_3.7
+rpm/gmp/1:6.2.0-13.el9
+rpm/gnupg2/2.3.3-4.el9
+rpm/gnutls/3.7.6-23.el9_3.3
+pypi/gpg/1.15.1 /usr/lib64/python3.9/site-packages/gpg-1.15.1-py3.9.egg-info
+rpm/gpg-pubkey/8d8b756f-629e59ec
+rpm/gpg-pubkey/8b4efbe6-629ec292
+rpm/gpgme/1.15.1-6.el9
+rpm/grep/3.6-5.el9
+rpm/gzip/1.12-1.el9
+rpm/ima-evm-utils/1.4-4.el9
+rpm/initscripts/10.11.5-1.el9
+rpm/initscripts-rename-device/10.11.5-1.el9
+rpm/initscripts-service/10.11.5-1.el9
+rpm/ipcalc/1.0.0-5.el9
+rpm/iproute/6.2.0-5.el9
+rpm/iputils/20210202-9.0.1.el9
+rpm/json-c/0.14-11.el9
+rpm/keyutils-libs/1.6.3-1.el9
+rpm/kmod-libs/28-9.0.1.el9
+rpm/krb5-libs/1.21.1-1.0.1.el9
+rpm/libacl/2.3.1-3.el9
+rpm/libarchive/3.5.3-4.el9
+rpm/libassuan/2.5.5-3.el9
+rpm/libattr/2.5.1-3.el9
+rpm/libblkid/2.37.4-15.0.1.el9
+rpm/libbpf/2:1.2.0-1.el9
+rpm/libbrotli/1.0.9-6.el9
+rpm/libcap/2.48-9.el9_2
+rpm/libcap-ng/0.8.2-7.el9
+rpm/libcbor/0.7.0-5.el9
+rpm/libcom_err/1.46.5-3.el9
+rpm/libcomps/0.1.18-1.el9
+pypi/libcomps/0.1.18 /usr/lib64/python3.9/site-packages/libcomps-0.1.18-py3.9.egg-info/PKG-INFO
+rpm/libcurl/7.76.1-26.el9_3.2
+rpm/libdb/5.3.28-53.0.1.el9
+rpm/libdnf/0.69.0-6.0.1.el9_3
+rpm/libeconf/0.4.1-3.el9_2
+rpm/libedit/3.1-38.20210216cvs.el9
+rpm/libestr/0.1.11-4.el9
+rpm/libevent/2.1.12-6.el9
+rpm/libfastjson/0.99.9-5.el9
+rpm/libfdisk/2.37.4-15.0.1.el9
+rpm/libffi/3.4.2-8.el9
+rpm/libfido2/1.13.0-1.el9
+rpm/libgcc/11.4.1-2.1.0.1.el9
+rpm/libgcrypt/1.10.0-10.el9_2
+rpm/libgomp/11.4.1-2.1.0.1.el9
+rpm/libgpg-error/1.42-5.el9
+rpm/libidn2/2.3.0-7.el9
+rpm/libksba/1.5.1-6.el9_1
+rpm/libmnl/1.0.4-15.el9
+rpm/libmodulemd/2.13.0-2.el9
+rpm/libmount/2.37.4-15.0.1.el9
+rpm/libnghttp2/1.43.0-5.el9_3.1
+rpm/libpsl/0.21.1-5.el9
+rpm/libpwquality/1.4.4-8.el9
+rpm/librepo/1.14.5-1.el9
+rpm/libreport-filesystem/2.15.2-6.0.3.el9
+rpm/libseccomp/2.5.2-2.el9
+rpm/libselinux/3.5-1.el9
+rpm/libselinux-utils/3.5-1.el9
+rpm/libsemanage/3.5-2.el9
+rpm/libsepol/3.5-1.el9
+rpm/libsigsegv/2.13-4.el9
+rpm/libsmartcols/2.37.4-15.0.1.el9
+rpm/libsolv/0.7.24-2.el9
+rpm/libssh/0.10.4-11.el9
+rpm/libssh-config/0.10.4-11.el9
+rpm/libstdc++/11.4.1-2.1.0.1.el9
+rpm/libtasn1/4.16.0-8.el9_1
+rpm/libunistring/0.9.10-15.el9
+rpm/libuser/0.63-13.el9
+rpm/libutempter/1.2.1-6.el9
+rpm/libuuid/2.37.4-15.0.1.el9
+rpm/libverto/0.3.2-3.el9
+rpm/libxcrypt/4.4.18-3.el9
+rpm/libxml2/2.9.13-5.el9_3
+rpm/libyaml/0.2.5-7.el9
+rpm/libzstd/1.5.1-2.el9
+rpm/lua-libs/5.4.4-4.el9
+rpm/lz4-libs/1.9.3-5.el9
+rpm/mpfr/4.1.0-7.el9
+rpm/ncurses-base/6.2-10.20210508.el9
+rpm/ncurses-libs/6.2-10.20210508.el9
+rpm/nettle/3.8-3.el9_0
+rpm/npth/1.6-8.el9
+rpm/openldap/2.6.3-1.el9
+rpm/openssh/8.7p1-34.el9
+rpm/openssh-clients/8.7p1-34.el9
+rpm/openssh-server/8.7p1-34.el9
+rpm/openssl/1:3.0.7-25.0.1.el9_3
+rpm/openssl-libs/1:3.0.7-25.0.1.el9_3
+rpm/oraclelinux-release/9:9.3-1.0.6.el9
+rpm/oraclelinux-release-el9/1.0-12.el9
+rpm/p11-kit/0.24.1-2.el9
+rpm/p11-kit-trust/0.24.1-2.el9
+rpm/pam/1.5.1-15.el9
+rpm/passwd/0.80-12.el9
+rpm/pcre/8.44-3.el9.3
+rpm/pcre2/10.40-2.0.2.el9
+rpm/pcre2-syntax/10.40-2.0.2.el9
+rpm/policycoreutils/3.5-3.el9_3
+rpm/popt/1.18-8.el9
+rpm/procps-ng/3.3.17-13.0.1.el9
+rpm/psmisc/23.4-3.el9
+rpm/publicsuffix-list-dafsa/20210518-3.el9
+pypi/python-dateutil/2.8.1 /usr/lib/python3.9/site-packages/python_dateutil-2.8.1-py3.9.egg-info/PKG-INFO
+pypi/python-dateutil/2.8.1 /usr/lib/python3.9/site-packages/python_dateutil-2.8.1-py3.9.egg-info/PKG-INFO
+rpm/python3/3.9.18-1.el9_3.1
+rpm/python3-dateutil/1:2.8.1-7.el9
+rpm/python3-dbus/1.2.18-2.el9
+rpm/python3-dnf/4.14.0-8.0.1.el9
+rpm/python3-dnf-plugins-core/4.3.0-11.0.1.el9_3
+rpm/python3-gpg/1.15.1-6.el9
+rpm/python3-hawkey/0.69.0-6.0.1.el9_3
+rpm/python3-libcomps/0.1.18-1.el9
+rpm/python3-libdnf/0.69.0-6.0.1.el9_3
+rpm/python3-libs/3.9.18-1.el9_3.1
+rpm/python3-pip-wheel/21.2.3-7.el9
+rpm/python3-rpm/4.16.1.3-27.0.1.el9_3
+rpm/python3-setuptools-wheel/53.0.0-12.el9
+rpm/python3-six/1.15.0-9.0.1.el9
+rpm/python3-systemd/234-18.el9
+rpm/readline/8.1-4.el9
+rpm/redhat-release/3:9.3-0.5.0.1.el9
+rpm/rootfiles/8.1-31.el9
+rpm/rpm/4.16.1.3-27.0.1.el9_3
+pypi/rpm/4.16.1.3 /usr/lib64/python3.9/site-packages/rpm-4.16.1.3-py3.9.egg-info
+rpm/rpm-build-libs/4.16.1.3-27.0.1.el9_3
+rpm/rpm-libs/4.16.1.3-27.0.1.el9_3
+rpm/rpm-sign-libs/4.16.1.3-27.0.1.el9_3
+rpm/rsyslog/8.2102.0-117.el9
+rpm/sed/4.8-9.el9
+rpm/setup/2.13.7-9.el9
+rpm/shadow-utils/2:4.9-8.el9
+pypi/six/1.15.0 /usr/lib/python3.9/site-packages/six-1.15.0.dist-info/METADATA
+pypi/six/1.15.0 /usr/lib/python3.9/site-packages/six-1.15.0.dist-info/METADATA
+rpm/sqlite-libs/3.34.1-7.el9_3
+rpm/systemd/252-18.0.1.el9
+rpm/systemd-libs/252-18.0.1.el9
+rpm/systemd-pam/252-18.0.1.el9
+pypi/systemd-python/234 /usr/lib64/python3.9/site-packages/systemd_python-234-py3.9.egg-info
+rpm/systemd-rpm-macros/252-18.0.1.el9
+rpm/tar/2:1.34-6.el9_1
+rpm/tpm2-tss/3.2.2-2.el9
+rpm/tzdata/2023d-1.el9
+rpm/util-linux/2.37.4-15.0.1.el9
+rpm/util-linux-core/2.37.4-15.0.1.el9
+rpm/vim-minimal/2:8.2.2637-20.0.1.el9_1
+rpm/xz-libs/5.2.5-8.el9_0
+rpm/yum/4.14.0-8.0.1.el9
+rpm/yum-utils/4.3.0-11.0.1.el9_3
+rpm/zlib/1.2.11-40.el9
+
diff --git a/test/sbom/testdata/photon-3-0-cli.txt b/test/sbom/testdata/photon-3-0-cli.txt
new file mode 100644
index 0000000000..7258c39c28
--- /dev/null
+++ b/test/sbom/testdata/photon-3-0-cli.txt
@@ -0,0 +1,39 @@
+rpm/bash/4.4.18-4.ph3
+rpm/bzip2-libs/1.0.8-2.ph3
+rpm/ca-certificates/20190521-3.ph3
+rpm/ca-certificates-pki/20190521-3.ph3
+rpm/curl/8.1.2-5.ph3
+rpm/curl-libs/8.1.2-5.ph3
+rpm/e2fsprogs-libs/1.46.5-2.ph3
+rpm/elfutils-libelf/0.176-3.ph3
+rpm/expat/2.2.9-11.ph3
+rpm/expat-libs/2.2.9-11.ph3
+rpm/filesystem/1.1-4.ph3
+rpm/glibc/2.28-25.ph3
+rpm/gpg-pubkey/8a6a826d-596882ca
+rpm/gpg-pubkey/66fd4949-4803fe57
+rpm/krb5/1.17-5.ph3
+rpm/libcap/2.25-8.ph3
+rpm/libdb/5.3.28-2.ph3
+rpm/libgcc/7.3.0-5.ph3
+rpm/libmetalink/0.1.3-2.ph3
+rpm/libsolv/0.6.35-8.ph3
+rpm/libssh2/1.9.0-3.ph3
+rpm/lua/5.3.6-1.ph3
+rpm/ncurses-libs/6.1-5.ph3
+rpm/nspr/4.21-1.ph3
+rpm/nss-libs/3.44-13.ph3
+rpm/openssl/1.0.2zi-1.ph3
+rpm/photon-release/3.0-6.ph3
+rpm/photon-repos/3.0-8.ph3
+rpm/popt/1.16-5.ph3
+rpm/readline/7.0-2.ph3
+rpm/rpm-libs/4.14.3-10.ph3
+rpm/sqlite-libs/3.35.5-3.ph3
+rpm/tdnf/3.1.15-2.ph3
+rpm/tdnf-cli-libs/3.1.15-2.ph3
+rpm/toybox/0.8.6-2.ph3
+rpm/xz-libs/5.2.4-2.ph3
+rpm/zlib/1.2.11-5.ph3
+rpm/zstd-libs/1.4.5-2.ph3
+
diff --git a/test/sbom/testdata/photon-4-0-cli.txt b/test/sbom/testdata/photon-4-0-cli.txt
new file mode 100644
index 0000000000..38315cc9bf
--- /dev/null
+++ b/test/sbom/testdata/photon-4-0-cli.txt
@@ -0,0 +1,37 @@
+rpm/bash/5.0-4.ph4
+rpm/bzip2-libs/1.0.8-4.ph4
+rpm/ca-certificates/20201001-4.ph4
+rpm/ca-certificates-pki/20201001-4.ph4
+rpm/curl/8.1.2-7.ph4
+rpm/curl-libs/8.1.2-7.ph4
+rpm/e2fsprogs-libs/1.46.5-2.ph4
+rpm/elfutils-libelf/0.181-7.ph4
+rpm/expat-libs/2.2.9-11.ph4
+rpm/filesystem/1.1-4.ph4
+rpm/glibc/2.32-15.ph4
+rpm/gpg-pubkey/66fd4949-4803fe57
+rpm/gpg-pubkey/8a6a826d-596882ca
+rpm/krb5/1.17-10.ph4
+rpm/libcap/2.43-3.ph4
+rpm/libgcc/10.5.0-1.ph4
+rpm/libsolv/0.7.19-5.ph4
+rpm/libssh2/1.11.0-1.ph4
+rpm/libxml2/2.9.12-12.ph4
+rpm/lua/5.4.4-3.ph4
+rpm/ncurses-libs/6.2-6.ph4
+rpm/nspr/4.32-1.ph4
+rpm/nss-libs/3.72-4.ph4
+rpm/openssl/3.0.9-8.ph4
+rpm/photon-release/4.0-2.ph4
+rpm/photon-repos/4.0-3.ph4
+rpm/popt/1.16-5.ph4
+rpm/readline/7.0-3.ph4
+rpm/rpm-libs/4.16.1.3-18.ph4
+rpm/sqlite-libs/3.38.5-4.ph4
+rpm/tdnf/3.3.9-3.ph4
+rpm/tdnf-cli-libs/3.3.9-3.ph4
+rpm/toybox/0.8.9-1.ph4
+rpm/xz-libs/5.2.5-2.ph4
+rpm/zlib/1.2.11-6.ph4
+rpm/zstd-libs/1.5.2-2.ph4
+
diff --git a/test/sbom/testdata/photon-5-0-cli.txt b/test/sbom/testdata/photon-5-0-cli.txt
new file mode 100644
index 0000000000..d6934e8170
--- /dev/null
+++ b/test/sbom/testdata/photon-5-0-cli.txt
@@ -0,0 +1,37 @@
+rpm/bash/5.2-1.ph5
+rpm/bzip2-libs/1.0.8-5.ph5
+rpm/ca-certificates/20230315-2.ph5
+rpm/ca-certificates-pki/20230315-2.ph5
+rpm/curl/8.1.2-7.ph5
+rpm/curl-libs/8.1.2-7.ph5
+rpm/e2fsprogs-libs/1.46.5-2.ph5
+rpm/elfutils-libelf/0.189-2.ph5
+rpm/expat-libs/2.5.0-1.ph5
+rpm/filesystem/1.1-4.ph5
+rpm/glibc/2.36-9.ph5
+rpm/glibc-libs/2.36-9.ph5
+rpm/gpg-pubkey/66fd4949-4803fe57
+rpm/gpg-pubkey/8a6a826d-596882ca
+rpm/krb5/1.20.2-1.ph5
+rpm/libcap/2.66-2.ph5
+rpm/libgcc/12.2.0-2.ph5
+rpm/libsolv/0.7.22-5.ph5
+rpm/libssh2/1.11.0-2.ph5
+rpm/lua-libs/5.4.6-1.ph5
+rpm/ncurses-libs/6.4-2.ph5
+rpm/nspr/4.33-1.ph5
+rpm/nss-libs/3.78-6.ph5
+rpm/openssl-libs/3.0.9-9.ph5
+rpm/photon-release/5.0-2.ph5
+rpm/photon-repos/5.0-4.ph5
+rpm/popt/1.16-5.ph5
+rpm/readline/8.2-2.ph5
+rpm/rpm-libs/4.18.2-1.ph5
+rpm/sqlite-libs/3.40.1-3.ph5
+rpm/tdnf/3.5.6-1.ph5
+rpm/tdnf-cli-libs/3.5.6-1.ph5
+rpm/toybox/0.8.9-5.ph5
+rpm/xz-libs/5.4.0-1.ph5
+rpm/zlib/1.2.13-2.ph5
+rpm/zstd-libs/1.5.5-2.ph5
+
diff --git a/test/sbom/testdata/rockylinux-8-9-cli.txt b/test/sbom/testdata/rockylinux-8-9-cli.txt
new file mode 100644
index 0000000000..820b09d8cf
--- /dev/null
+++ b/test/sbom/testdata/rockylinux-8-9-cli.txt
@@ -0,0 +1,154 @@
+rpm/acl/2.2.53-1.el8.1
+rpm/audit-libs/3.0.7-5.el8
+rpm/basesystem/11-5.el8
+rpm/bash/4.4.20-4.el8_6
+rpm/binutils/2.30-123.el8
+rpm/bzip2-libs/1.0.6-26.el8
+rpm/ca-certificates/2023.2.60_v7.0.306-80.0.el8_8
+rpm/chkconfig/1.19.2-1.el8
+rpm/coreutils-single/8.30-15.el8
+rpm/cracklib/2.9.6-15.el8
+rpm/cracklib-dicts/2.9.6-15.el8
+rpm/crypto-policies/20230731-1.git3177e06.el8
+rpm/cryptsetup-libs/2.3.7-7.el8
+rpm/curl/7.61.1-33.el8
+rpm/cyrus-sasl-lib/2.1.27-6.el8_5
+rpm/dbus/1:1.12.8-26.el8
+rpm/dbus-common/1:1.12.8-26.el8
+rpm/dbus-daemon/1:1.12.8-26.el8
+rpm/dbus-libs/1:1.12.8-26.el8
+rpm/dbus-tools/1:1.12.8-26.el8
+rpm/device-mapper/8:1.02.181-13.el8_9
+rpm/device-mapper-libs/8:1.02.181-13.el8_9
+rpm/dnf/4.7.0-19.el8
+rpm/dnf-data/4.7.0-19.el8
+rpm/elfutils-default-yama-scope/0.189-3.el8
+rpm/elfutils-libelf/0.189-3.el8
+rpm/elfutils-libs/0.189-3.el8
+rpm/expat/2.2.5-11.el8
+rpm/file-libs/5.33-25.el8
+rpm/filesystem/3.8-6.el8
+rpm/gawk/4.2.1-4.el8
+rpm/gdbm/1:1.18-2.el8
+rpm/gdbm-libs/1:1.18-2.el8
+rpm/glib2/2.56.4-161.el8
+rpm/glibc/2.28-236.el8_9.7
+rpm/glibc-common/2.28-236.el8_9.7
+rpm/glibc-minimal-langpack/2.28-236.el8_9.7
+rpm/gmp/1:6.1.2-10.el8
+rpm/gnupg2/2.2.20-3.el8_6
+rpm/gnutls/3.6.16-7.el8
+pypi/gpg/1.13.1 /usr/lib64/python3.6/site-packages/gpg-1.13.1-py3.6.egg-info
+rpm/gpgme/1.13.1-11.el8
+rpm/grep/3.1-6.el8
+rpm/gzip/1.9-13.el8_5
+rpm/hostname/3.20-6.el8
+rpm/ima-evm-utils/1.3.2-12.el8
+rpm/info/6.5-7.el8
+rpm/iputils/20180629-11.el8
+rpm/json-c/0.13.1-3.el8
+rpm/keyutils-libs/1.5.10-9.el8
+rpm/kmod-libs/25-19.el8
+rpm/krb5-libs/1.18.2-26.el8
+rpm/langpacks-en/1.0-12.el8
+rpm/less/530-1.el8
+rpm/libacl/2.2.53-1.el8.1
+rpm/libarchive/3.3.3-5.el8
+rpm/libassuan/2.5.1-3.el8
+rpm/libattr/2.4.48-3.el8
+rpm/libblkid/2.32.1-43.el8
+rpm/libcap/2.48-5.el8_8
+rpm/libcap-ng/0.7.11-1.el8
+rpm/libcom_err/1.45.6-5.el8
+rpm/libcomps/0.1.18-1.el8
+pypi/libcomps/0.1.18 /usr/lib64/python3.6/site-packages/libcomps-0.1.18-py3.6.egg-info/PKG-INFO
+rpm/libcurl-minimal/7.61.1-33.el8
+rpm/libdb/5.3.28-42.el8_4
+rpm/libdb-utils/5.3.28-42.el8_4
+rpm/libdnf/0.63.0-17.el8_9
+rpm/libfdisk/2.32.1-43.el8
+rpm/libffi/3.1-24.el8
+rpm/libgcc/8.5.0-20.el8
+rpm/libgcrypt/1.8.5-7.el8_6
+rpm/libgpg-error/1.31-1.el8
+rpm/libidn2/2.2.0-1.el8
+rpm/libksba/1.3.5-9.el8_7
+rpm/libmodulemd/2.13.0-1.el8
+rpm/libmount/2.32.1-43.el8
+rpm/libnghttp2/1.33.0-5.el8_8
+rpm/libnsl2/1.2.0-2.20180605git4a062cf.el8
+rpm/libpwquality/1.4.4-6.el8
+rpm/librepo/1.14.2-4.el8
+rpm/libreport-filesystem/2.9.5-15.el8.rocky.6.3
+rpm/libseccomp/2.5.2-1.el8
+rpm/libselinux/2.9-8.el8
+rpm/libsemanage/2.9-9.el8_6
+rpm/libsepol/2.9-3.el8
+rpm/libsigsegv/2.11-5.el8
+rpm/libsmartcols/2.32.1-43.el8
+rpm/libsolv/0.7.20-6.el8
+rpm/libstdc++/8.5.0-20.el8
+rpm/libtasn1/4.13-4.el8_7
+rpm/libtirpc/1.1.4-8.el8
+rpm/libunistring/0.9.9-3.el8
+rpm/libusbx/1.0.23-4.el8
+rpm/libutempter/1.1.6-14.el8
+rpm/libuuid/2.32.1-43.el8
+rpm/libverto/0.3.2-2.el8
+rpm/libxcrypt/4.1.1-6.el8
+rpm/libxml2/2.9.7-16.el8_8.1
+rpm/libyaml/0.1.7-5.el8
+rpm/libzstd/1.4.4-1.el8
+rpm/lua-libs/5.3.4-12.el8
+rpm/lz4-libs/1.8.3-3.el8_4
+rpm/mpfr/3.1.6-1.el8
+rpm/ncurses-base/6.1-10.20180224.el8
+rpm/ncurses-libs/6.1-10.20180224.el8
+rpm/nettle/3.4.1-7.el8
+rpm/npth/1.5-4.el8
+rpm/openldap/2.4.46-18.el8
+rpm/openssl-libs/1:1.1.1k-9.el8_7
+rpm/p11-kit/0.23.22-1.el8
+rpm/p11-kit-trust/0.23.22-1.el8
+rpm/pam/1.3.1-27.el8
+rpm/pcre/8.42-6.el8
+rpm/pcre2/10.32-3.el8_6
+rpm/platform-python/3.6.8-56.el8_9.rocky.0
+rpm/platform-python-setuptools/39.2.0-7.el8
+rpm/popt/1.18-1.el8
+rpm/python3-dnf/4.7.0-19.el8
+rpm/python3-gpg/1.13.1-11.el8
+rpm/python3-hawkey/0.63.0-17.el8_9
+rpm/python3-libcomps/0.1.18-1.el8
+rpm/python3-libdnf/0.63.0-17.el8_9
+rpm/python3-libs/3.6.8-56.el8_9.rocky.0
+rpm/python3-pip-wheel/9.0.3-23.el8.rocky.0
+rpm/python3-rpm/4.14.3-26.el8
+rpm/python3-setuptools-wheel/39.2.0-7.el8
+rpm/readline/7.0-10.el8
+rpm/rocky-gpg-keys/8.9-1.6.el8
+rpm/rocky-release/8.9-1.6.el8
+rpm/rocky-repos/8.9-1.6.el8
+rpm/rootfiles/8.1-22.el8
+rpm/rpm/4.14.3-26.el8
+pypi/rpm/4.14.3 /usr/lib64/python3.6/site-packages/rpm-4.14.3-py3.6.egg-info
+rpm/rpm-build-libs/4.14.3-26.el8
+rpm/rpm-libs/4.14.3-26.el8
+rpm/sed/4.5-5.el8
+rpm/setup/2.12.2-9.el8
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+pypi/setuptools/39.2.0 /usr/lib/python3.6/site-packages/setuptools-39.2.0.dist-info/METADATA
+rpm/shadow-utils/2:4.6-19.el8
+rpm/sqlite-libs/3.26.0-18.el8_8
+rpm/systemd/239-78.el8
+rpm/systemd-libs/239-78.el8
+rpm/systemd-pam/239-78.el8
+rpm/tar/2:1.30-9.el8
+rpm/tpm2-tss/2.3.2-5.el8
+rpm/tzdata/2023c-2.el8
+rpm/util-linux/2.32.1-43.el8
+rpm/vim-minimal/2:8.0.1763-19.el8_6.4
+rpm/xz-libs/5.2.4-4.el8_6
+rpm/yum/4.7.0-19.el8
+rpm/zlib/1.2.11-25.el8
+
diff --git a/test/sbom/testdata/rockylinux-9-3-cli.txt b/test/sbom/testdata/rockylinux-9-3-cli.txt
new file mode 100644
index 0000000000..3687885e1d
--- /dev/null
+++ b/test/sbom/testdata/rockylinux-9-3-cli.txt
@@ -0,0 +1,146 @@
+rpm/alternatives/1.24-1.el9
+rpm/audit-libs/3.0.7-104.el9
+rpm/basesystem/11-13.el9
+rpm/bash/5.1.8-6.el9_1
+rpm/binutils/2.35.2-42.el9
+rpm/binutils-gold/2.35.2-42.el9
+rpm/bzip2-libs/1.0.8-8.el9
+rpm/ca-certificates/2023.2.60_v7.0.306-90.1.el9_2
+rpm/coreutils-single/8.32-34.el9
+rpm/cracklib/2.9.6-27.el9
+rpm/cracklib-dicts/2.9.6-27.el9
+rpm/crypto-policies/20230731-1.git94f0e2c.el9_3.1
+rpm/crypto-policies-scripts/20230731-1.git94f0e2c.el9_3.1
+rpm/curl-minimal/7.76.1-26.el9_3.2.0.1
+rpm/cyrus-sasl-lib/2.1.27-21.el9
+rpm/dnf/4.14.0-8.el9
+rpm/dnf-data/4.14.0-8.el9
+rpm/elfutils-debuginfod-client/0.189-3.el9
+rpm/elfutils-default-yama-scope/0.189-3.el9
+rpm/elfutils-libelf/0.189-3.el9
+rpm/elfutils-libs/0.189-3.el9
+rpm/expat/2.5.0-1.el9
+rpm/file-libs/5.39-14.el9
+rpm/filesystem/3.16-2.el9
+rpm/findutils/1:4.8.0-6.el9
+rpm/gawk/5.1.0-6.el9
+rpm/gdbm-libs/1:1.19-4.el9
+rpm/glib2/2.68.4-11.el9
+rpm/glibc/2.34-83.el9.7
+rpm/glibc-common/2.34-83.el9.7
+rpm/glibc-minimal-langpack/2.34-83.el9.7
+rpm/gmp/1:6.2.0-13.el9
+rpm/gnupg2/2.3.3-4.el9
+rpm/gnutls/3.7.6-23.el9
+pypi/gpg/1.15.1 /usr/lib64/python3.9/site-packages/gpg-1.15.1-py3.9.egg-info
+rpm/gpgme/1.15.1-6.el9
+rpm/grep/3.6-5.el9
+rpm/gzip/1.12-1.el9
+rpm/hostname/3.23-6.el9
+rpm/ima-evm-utils/1.4-4.el9
+rpm/json-c/0.14-11.el9
+rpm/keyutils-libs/1.6.3-1.el9
+rpm/krb5-libs/1.21.1-1.el9
+rpm/less/590-2.el9_2
+rpm/libacl/2.3.1-3.el9
+rpm/libarchive/3.5.3-4.el9
+rpm/libassuan/2.5.5-3.el9
+rpm/libatomic/11.4.1-2.1.el9
+rpm/libattr/2.5.1-3.el9
+rpm/libblkid/2.37.4-15.el9
+rpm/libcap/2.48-9.el9_2
+rpm/libcap-ng/0.8.2-7.el9
+rpm/libcom_err/1.46.5-3.el9
+rpm/libcomps/0.1.18-1.el9
+pypi/libcomps/0.1.18 /usr/lib64/python3.9/site-packages/libcomps-0.1.18-py3.9.egg-info/PKG-INFO
+rpm/libcurl-minimal/7.76.1-26.el9_3.2.0.1
+rpm/libdb/5.3.28-53.el9
+rpm/libdnf/0.69.0-6.el9_3
+rpm/libeconf/0.4.1-3.el9_2
+rpm/libevent/2.1.12-6.el9
+rpm/libfdisk/2.37.4-15.el9
+rpm/libffi/3.4.2-8.el9
+rpm/libgcc/11.4.1-2.1.el9
+rpm/libgcrypt/1.10.0-10.el9_2
+rpm/libgomp/11.4.1-2.1.el9
+rpm/libgpg-error/1.42-5.el9
+rpm/libidn2/2.3.0-7.el9
+rpm/libksba/1.5.1-6.el9_1
+rpm/libmodulemd/2.13.0-2.el9
+rpm/libmount/2.37.4-15.el9
+rpm/libnghttp2/1.43.0-5.el9_3.1
+rpm/libpwquality/1.4.4-8.el9
+rpm/librepo/1.14.5-1.el9
+rpm/libreport-filesystem/2.15.2-6.el9.rocky.0.2
+rpm/libselinux/3.5-1.el9
+rpm/libsemanage/3.5-2.el9
+rpm/libsepol/3.5-1.el9
+rpm/libsigsegv/2.13-4.el9
+rpm/libsmartcols/2.37.4-15.el9
+rpm/libsolv/0.7.24-2.el9
+rpm/libstdc++/11.4.1-2.1.el9
+rpm/libtasn1/4.16.0-8.el9_1
+rpm/libunistring/0.9.10-15.el9
+rpm/libusbx/1.0.26-1.el9
+rpm/libuser/0.63-13.el9
+rpm/libutempter/1.2.1-6.el9
+rpm/libuuid/2.37.4-15.el9
+rpm/libverto/0.3.2-3.el9
+rpm/libxcrypt/4.4.18-3.el9
+rpm/libxml2/2.9.13-4.el9
+rpm/libyaml/0.2.5-7.el9
+rpm/libzstd/1.5.1-2.el9
+rpm/lua-libs/5.4.4-4.el9
+rpm/lz4-libs/1.9.3-5.el9
+rpm/mpfr/4.1.0-7.el9
+rpm/ncurses-base/6.2-10.20210508.el9
+rpm/ncurses-libs/6.2-10.20210508.el9
+rpm/nettle/3.8-3.el9_0
+rpm/npth/1.6-8.el9
+rpm/openldap/2.6.3-1.el9
+rpm/openssl/1:3.0.7-24.el9
+rpm/openssl-libs/1:3.0.7-24.el9
+rpm/p11-kit/0.24.1-2.el9
+rpm/p11-kit-trust/0.24.1-2.el9
+rpm/pam/1.5.1-15.el9
+rpm/passwd/0.80-12.el9
+rpm/pcre/8.44-3.el9.3
+rpm/pcre2/10.40-2.el9
+rpm/pcre2-syntax/10.40-2.el9
+rpm/popt/1.18-8.el9
+rpm/python3/3.9.18-1.el9_3
+rpm/python3-dnf/4.14.0-8.el9
+rpm/python3-gpg/1.15.1-6.el9
+rpm/python3-hawkey/0.69.0-6.el9_3
+rpm/python3-libcomps/0.1.18-1.el9
+rpm/python3-libdnf/0.69.0-6.el9_3
+rpm/python3-libs/3.9.18-1.el9_3
+rpm/python3-pip-wheel/21.2.3-7.el9
+rpm/python3-rpm/4.16.1.3-25.el9
+rpm/python3-setuptools-wheel/53.0.0-12.el9
+rpm/readline/8.1-4.el9
+rpm/rocky-gpg-keys/9.3-1.1.el9
+rpm/rocky-release/9.3-1.1.el9
+rpm/rocky-repos/9.3-1.1.el9
+rpm/rootfiles/8.1-31.el9
+rpm/rpm/4.16.1.3-25.el9
+pypi/rpm/4.16.1.3 /usr/lib64/python3.9/site-packages/rpm-4.16.1.3-py3.9.egg-info
+rpm/rpm-build-libs/4.16.1.3-25.el9
+rpm/rpm-libs/4.16.1.3-25.el9
+rpm/rpm-sign-libs/4.16.1.3-25.el9
+rpm/sed/4.8-9.el9
+rpm/setup/2.13.7-9.el9
+rpm/shadow-utils/2:4.9-8.el9
+rpm/sqlite-libs/3.34.1-6.el9_1
+rpm/systemd-libs/252-18.el9
+rpm/tar/2:1.34-6.el9_1
+rpm/tpm2-tss/3.2.2-2.el9
+rpm/tzdata/2023c-1.el9
+rpm/usermode/1.114-4.el9
+rpm/util-linux/2.37.4-15.el9
+rpm/util-linux-core/2.37.4-15.el9
+rpm/vim-minimal/2:8.2.2637-20.el9_1
+rpm/xz-libs/5.2.5-8.el9_0
+rpm/yum/4.14.0-8.el9
+rpm/zlib/1.2.11-40.el9
+
diff --git a/test/sbom/testdata/ubuntu-14-04-cli.txt b/test/sbom/testdata/ubuntu-14-04-cli.txt
new file mode 100644
index 0000000000..f2d1474e79
--- /dev/null
+++ b/test/sbom/testdata/ubuntu-14-04-cli.txt
@@ -0,0 +1,216 @@
+pypi/PyYAML/3.10 /usr/lib/python3/dist-packages/PyYAML-3.10.egg-info
+deb/adduser/3.113+nmu3ubuntu3
+deb/apt/1.0.1ubuntu2.24
+deb/apt-transport-https/1.0.1ubuntu2.24
+deb/apt-utils/1.0.1ubuntu2.24
+deb/base-files/7.2ubuntu5.6
+deb/base-passwd/3.5.33
+deb/bash/4.3-7ubuntu1.7
+deb/bsdutils/1:2.20.1-5.1ubuntu20.9
+deb/busybox-initramfs/1:1.21.0-1ubuntu1.4
+deb/bzip2/1.0.6-5
+deb/ca-certificates/20170717~14.04.2
+deb/console-setup/1.70ubuntu8
+deb/coreutils/8.21-1ubuntu5.4
+deb/cpio/2.11+dfsg-1ubuntu1.2
+deb/cron/3.0pl1-124ubuntu2
+deb/dash/0.5.7-4ubuntu1
+deb/debconf/1.5.51ubuntu2
+deb/debconf-i18n/1.5.51ubuntu2
+deb/debianutils/4.4
+deb/dh-python/1.20140128-1ubuntu8.2
+deb/diffutils/1:3.3-1
+deb/dmsetup/2:1.02.77-6ubuntu2
+deb/dpkg/1.17.5ubuntu5.8
+deb/e2fslibs/1.42.9-3ubuntu1.3
+deb/e2fsprogs/1.42.9-3ubuntu1.3
+deb/eject/2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1
+deb/file/1:5.14-2ubuntu3.4
+deb/findutils/4.4.2-7
+deb/gcc-4.8-base/4.8.4-2ubuntu1~14.04.4
+deb/gcc-4.9-base/4.9.3-0ubuntu4
+deb/gnupg/1.4.16-1ubuntu2.6
+deb/gpgv/1.4.16-1ubuntu2.6
+deb/grep/2.16-1
+deb/gzip/1.6-3ubuntu1
+deb/hostname/3.15ubuntu1
+deb/ifupdown/0.7.47.2ubuntu4.5
+deb/init-system-helpers/1.14ubuntu1
+deb/initramfs-tools/0.103ubuntu4.11
+deb/initramfs-tools-bin/0.103ubuntu4.11
+deb/initscripts/2.88dsf-41ubuntu6.3
+deb/insserv/1.14.0-5ubuntu2
+deb/iproute2/3.12.0-2ubuntu1.2
+deb/iputils-ping/3:20121221-4ubuntu1.1
+deb/isc-dhcp-client/4.2.4-7ubuntu12.13
+deb/isc-dhcp-common/4.2.4-7ubuntu12.13
+deb/kbd/1.15.5-1ubuntu1
+deb/keyboard-configuration/1.70ubuntu8
+deb/klibc-utils/2.0.3-0ubuntu1.14.04.3
+deb/kmod/15-0ubuntu7
+deb/krb5-locales/1.12+dfsg-2ubuntu5.4
+deb/less/458-2
+deb/libacl1/2.2.52-1
+deb/libapt-inst1.5/1.0.1ubuntu2.24
+deb/libapt-pkg4.12/1.0.1ubuntu2.24
+deb/libarchive-extract-perl/0.70-1
+deb/libasn1-8-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libattr1/1:2.4.47-1ubuntu1
+deb/libaudit-common/1:2.3.2-2ubuntu1
+deb/libaudit1/1:2.3.2-2ubuntu1
+deb/libblkid1/2.20.1-5.1ubuntu20.9
+deb/libbsd0/0.6.0-2ubuntu1
+deb/libbz2-1.0/1.0.6-5
+deb/libc-bin/2.19-0ubuntu6.15
+deb/libc6/2.19-0ubuntu6.15
+deb/libcap2/1:2.24-0ubuntu2
+deb/libcap2-bin/1:2.24-0ubuntu2
+deb/libcgmanager0/0.24-0ubuntu7.5
+deb/libcomerr2/1.42.9-3ubuntu1.3
+deb/libcurl3-gnutls/7.35.0-1ubuntu2.20
+deb/libdb5.3/5.3.28-3ubuntu3.1
+deb/libdbus-1-3/1.6.18-0ubuntu4.5
+deb/libdebconfclient0/0.187ubuntu1
+deb/libdevmapper1.02.1/2:1.02.77-6ubuntu2
+deb/libdrm2/2.4.67-1ubuntu0.14.04.2
+deb/libestr0/0.1.9-0ubuntu2
+deb/libexpat1/2.1.0-4ubuntu1.4
+deb/libffi6/3.1~rc1+r3.0.13-12ubuntu0.2
+deb/libfribidi0/0.19.6-1
+deb/libgcc1/1:4.9.3-0ubuntu4
+deb/libgcrypt11/1.5.3-2ubuntu4.6
+deb/libgdbm3/1.8.3-12build1
+deb/libgnutls-openssl27/2.12.23-12ubuntu2.8
+deb/libgnutls26/2.12.23-12ubuntu2.8
+deb/libgpg-error0/1.12-0.2ubuntu1
+deb/libgssapi-krb5-2/1.12+dfsg-2ubuntu5.4
+deb/libgssapi3-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libhcrypto4-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libheimbase1-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libheimntlm0-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libhx509-5-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libidn11/1.28-1ubuntu2.2
+deb/libjson-c2/0.11-3ubuntu1.2
+deb/libjson0/0.11-3ubuntu1.2
+deb/libk5crypto3/1.12+dfsg-2ubuntu5.4
+deb/libkeyutils1/1.5.6-1
+deb/libklibc/2.0.3-0ubuntu1.14.04.3
+deb/libkmod2/15-0ubuntu7
+deb/libkrb5-26-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libkrb5-3/1.12+dfsg-2ubuntu5.4
+deb/libkrb5support0/1.12+dfsg-2ubuntu5.4
+deb/libldap-2.4-2/2.4.31-1+nmu2ubuntu8.5
+deb/liblocale-gettext-perl/1.05-7build3
+deb/liblockfile-bin/1.09-6ubuntu1
+deb/liblockfile1/1.09-6ubuntu1
+deb/liblog-message-simple-perl/0.10-1
+deb/liblzma5/5.1.1alpha+20120614-2ubuntu2
+deb/libmagic1/1:5.14-2ubuntu3.4
+deb/libmodule-pluggable-perl/5.1-1
+deb/libmount1/2.20.1-5.1ubuntu20.9
+deb/libmpdec2/2.4.0-6
+deb/libncurses5/5.9+20140118-1ubuntu1
+deb/libncursesw5/5.9+20140118-1ubuntu1
+deb/libnewt0.52/0.52.15-2ubuntu5
+deb/libnih-dbus1/1.0.3-4ubuntu25
+deb/libnih1/1.0.3-4ubuntu25
+deb/libp11-kit0/0.20.2-2ubuntu2
+deb/libpam-cap/1:2.24-0ubuntu2
+deb/libpam-modules/1.1.8-1ubuntu2.2
+deb/libpam-modules-bin/1.1.8-1ubuntu2.2
+deb/libpam-runtime/1.1.8-1ubuntu2.2
+deb/libpam0g/1.1.8-1ubuntu2.2
+deb/libpcre3/1:8.31-2ubuntu2.3
+deb/libplymouth2/0.8.8-0ubuntu17.2
+deb/libpng12-0/1.2.50-1ubuntu2.14.04.3
+deb/libpod-latex-perl/0.61-1
+deb/libpopt0/1.16-8ubuntu1
+deb/libprocps3/1:3.3.9-1ubuntu2.3
+deb/libpython3-stdlib/3.4.0-0ubuntu2
+deb/libpython3.4-minimal/3.4.3-1ubuntu1~14.04.7
+deb/libpython3.4-stdlib/3.4.3-1ubuntu1~14.04.7
+deb/libreadline6/6.3-4ubuntu2
+deb/libroken18-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/librtmp0/2.4+20121230.gitdf6c518-1ubuntu0.1
+deb/libsasl2-2/2.1.25.dfsg1-17build1
+deb/libsasl2-modules/2.1.25.dfsg1-17build1
+deb/libsasl2-modules-db/2.1.25.dfsg1-17build1
+deb/libselinux1/2.2.2-1ubuntu0.1
+deb/libsemanage-common/2.2-1
+deb/libsemanage1/2.2-1
+deb/libsepol1/2.2-1ubuntu0.1
+deb/libslang2/2.2.4-15ubuntu1
+deb/libsqlite3-0/3.8.2-1ubuntu2.2
+deb/libss2/1.42.9-3ubuntu1.3
+deb/libssl1.0.0/1.0.1f-1ubuntu2.27
+deb/libstdc++6/4.8.4-2ubuntu1~14.04.4
+deb/libtasn1-6/3.4-3ubuntu0.6
+deb/libterm-ui-perl/0.42-1
+deb/libtext-charwidth-perl/0.04-7build3
+deb/libtext-iconv-perl/1.7-5build2
+deb/libtext-soundex-perl/3.4-1build1
+deb/libtext-wrapi18n-perl/0.06-7
+deb/libtinfo5/5.9+20140118-1ubuntu1
+deb/libudev1/204-5ubuntu20.31
+deb/libusb-0.1-4/2:0.1.12-23.3ubuntu1
+deb/libustr-1.0-1/1.0.4-3ubuntu2
+deb/libuuid1/2.20.1-5.1ubuntu20.9
+deb/libwind0-heimdal/1.6~git20131207+dfsg-1ubuntu1.2
+deb/libyaml-0-2/0.1.4-3ubuntu3.1
+deb/locales/2.13+git20120306-12.1
+deb/lockfile-progs/0.1.17
+deb/login/1:4.1.5.1-1ubuntu9.5
+deb/logrotate/3.8.7-1ubuntu1.2
+deb/lsb-base/4.1+Debian11ubuntu6.2
+deb/lsb-release/4.1+Debian11ubuntu6.2
+deb/makedev/2.3.1-93ubuntu2~ubuntu14.04.1
+deb/mawk/1.3.3-17ubuntu2
+deb/mime-support/3.54ubuntu1.1
+deb/module-init-tools/15-0ubuntu7
+deb/mount/2.20.1-5.1ubuntu20.9
+deb/mountall/2.53ubuntu1
+deb/multiarch-support/2.19-0ubuntu6.15
+deb/ncurses-base/5.9+20140118-1ubuntu1
+deb/ncurses-bin/5.9+20140118-1ubuntu1
+deb/net-tools/1.60-25ubuntu2.1
+deb/netbase/5.2
+deb/netcat-openbsd/1.105-7ubuntu1
+deb/ntpdate/1:4.2.6.p5+dfsg-3ubuntu2.14.04.13
+deb/openssl/1.0.1f-1ubuntu2.27
+deb/passwd/1:4.1.5.1-1ubuntu9.5
+deb/perl/5.18.2-2ubuntu1.7
+deb/perl-base/5.18.2-2ubuntu1.7
+deb/perl-modules/5.18.2-2ubuntu1.7
+deb/plymouth/0.8.8-0ubuntu17.2
+deb/procps/1:3.3.9-1ubuntu2.3
+deb/python3/3.4.0-0ubuntu2
+deb/python3-minimal/3.4.0-0ubuntu2
+deb/python3-pkg-resources/3.3-1ubuntu2
+deb/python3-yaml/3.10-4ubuntu0.1
+deb/python3.4/3.4.3-1ubuntu1~14.04.7
+deb/python3.4-minimal/3.4.3-1ubuntu1~14.04.7
+deb/readline-common/6.3-4ubuntu2
+deb/resolvconf/1.69ubuntu1.4
+deb/rsyslog/7.4.4-1ubuntu2.7
+deb/sed/4.2.2-4ubuntu1
+deb/sensible-utils/0.0.9ubuntu0.14.04.1
+deb/sudo/1.8.9p5-1ubuntu1.4
+deb/sysv-rc/2.88dsf-41ubuntu6.3
+deb/sysvinit-utils/2.88dsf-41ubuntu6.3
+deb/tar/1.27.1-1ubuntu0.1
+deb/tzdata/2019a-0ubuntu0.14.04
+deb/ubuntu-advantage-tools/19.6~ubuntu14.04.3
+pypi/ubuntu-advantage-tools/19.6 /usr/lib/python3/dist-packages/ubuntu_advantage_tools-19.6.egg-info/PKG-INFO
+deb/ubuntu-keyring/2012.05.19
+deb/ubuntu-minimal/1.325.1
+deb/ucf/3.0027+nmu1
+deb/udev/204-5ubuntu20.31
+deb/upstart/1.12.1-0ubuntu4.2
+deb/ureadahead/0.100.0-16
+deb/util-linux/2.20.1-5.1ubuntu20.9
+deb/vim-common/2:7.4.052-1ubuntu3.1
+deb/vim-tiny/2:7.4.052-1ubuntu3.1
+deb/whiptail/0.52.15-2ubuntu5
+deb/xkb-data/2.10.1-1ubuntu1
+deb/zlib1g/1:1.2.8.dfsg-1ubuntu1.1
+
diff --git a/test/sbom/testdata/ubuntu-16-04-cli.txt b/test/sbom/testdata/ubuntu-16-04-cli.txt
new file mode 100644
index 0000000000..8737968d10
--- /dev/null
+++ b/test/sbom/testdata/ubuntu-16-04-cli.txt
@@ -0,0 +1,98 @@
+deb/adduser/3.113+nmu3ubuntu4
+deb/apt/1.2.35
+deb/base-files/9.4ubuntu4.13
+deb/base-passwd/3.5.39
+deb/bash/4.3-14ubuntu1.4
+deb/bsdutils/1:2.27.1-6ubuntu3.10
+deb/coreutils/8.25-2ubuntu3~16.04
+deb/dash/0.5.8-2.1ubuntu2
+deb/debconf/1.5.58ubuntu2
+deb/debianutils/4.7
+deb/diffutils/1:3.3-3
+deb/dpkg/1.18.4ubuntu1.7
+deb/e2fslibs/1.42.13-1ubuntu1.2
+deb/e2fsprogs/1.42.13-1ubuntu1.2
+deb/findutils/4.6.0+git+20160126-2
+deb/gcc-5-base/5.4.0-6ubuntu1~16.04.12
+deb/gcc-6-base/6.0.1-0ubuntu1
+deb/gnupg/1.4.20-1ubuntu3.3
+deb/gpgv/1.4.20-1ubuntu3.3
+deb/grep/2.25-1~16.04.1
+deb/gzip/1.6-4ubuntu1
+deb/hostname/3.16ubuntu2
+deb/init/1.29ubuntu4
+deb/init-system-helpers/1.29ubuntu4
+deb/initscripts/2.88dsf-59.3ubuntu2
+deb/insserv/1.14.0-5ubuntu3
+deb/libacl1/2.2.52-3
+deb/libapparmor1/2.10.95-0ubuntu2.11
+deb/libapt-pkg5.0/1.2.35
+deb/libattr1/1:2.4.47-2
+deb/libaudit-common/1:2.4.5-1ubuntu2.1
+deb/libaudit1/1:2.4.5-1ubuntu2.1
+deb/libblkid1/2.27.1-6ubuntu3.10
+deb/libbz2-1.0/1.0.6-8ubuntu0.2
+deb/libc-bin/2.23-0ubuntu11.3
+deb/libc6/2.23-0ubuntu11.3
+deb/libcap2/1:2.24-12
+deb/libcap2-bin/1:2.24-12
+deb/libcomerr2/1.42.13-1ubuntu1.2
+deb/libcryptsetup4/2:1.6.6-5ubuntu2.1
+deb/libdb5.3/5.3.28-11ubuntu0.2
+deb/libdebconfclient0/0.198ubuntu1
+deb/libdevmapper1.02.1/2:1.02.110-1ubuntu10
+deb/libfdisk1/2.27.1-6ubuntu3.10
+deb/libgcc1/1:6.0.1-0ubuntu1
+deb/libgcrypt20/1.6.5-2ubuntu0.6
+deb/libgpg-error0/1.21-2ubuntu1
+deb/libkmod2/22-1ubuntu5.2
+deb/liblz4-1/0.0~r131-2ubuntu2
+deb/liblzma5/5.1.1alpha+20120614-2ubuntu2
+deb/libmount1/2.27.1-6ubuntu3.10
+deb/libncurses5/6.0+20160213-1ubuntu1
+deb/libncursesw5/6.0+20160213-1ubuntu1
+deb/libpam-modules/1.1.8-3.2ubuntu2.3
+deb/libpam-modules-bin/1.1.8-3.2ubuntu2.3
+deb/libpam-runtime/1.1.8-3.2ubuntu2.3
+deb/libpam0g/1.1.8-3.2ubuntu2.3
+deb/libpcre3/2:8.38-3.1
+deb/libprocps4/2:3.3.10-4ubuntu2.5
+deb/libreadline6/6.3-8ubuntu2
+deb/libseccomp2/2.5.1-1ubuntu1~16.04.1
+deb/libselinux1/2.4-3build2
+deb/libsemanage-common/2.3-1build3
+deb/libsemanage1/2.3-1build3
+deb/libsepol1/2.4-2
+deb/libsmartcols1/2.27.1-6ubuntu3.10
+deb/libss2/1.42.13-1ubuntu1.2
+deb/libstdc++6/5.4.0-6ubuntu1~16.04.12
+deb/libsystemd0/229-4ubuntu21.31
+deb/libtinfo5/6.0+20160213-1ubuntu1
+deb/libudev1/229-4ubuntu21.31
+deb/libusb-0.1-4/2:0.1.12-28
+deb/libustr-1.0-1/1.0.4-5
+deb/libuuid1/2.27.1-6ubuntu3.10
+deb/libzstd1/1.3.1+dfsg-1~ubuntu0.16.04.1
+deb/login/1:4.2-3.1ubuntu5.4
+deb/lsb-base/9.20160110ubuntu0.2
+deb/makedev/2.3.1-93ubuntu2~ubuntu16.04.1
+deb/mawk/1.3.3-17ubuntu2
+deb/mount/2.27.1-6ubuntu3.10
+deb/multiarch-support/2.23-0ubuntu11.3
+deb/ncurses-base/6.0+20160213-1ubuntu1
+deb/ncurses-bin/6.0+20160213-1ubuntu1
+deb/passwd/1:4.2-3.1ubuntu5.4
+deb/perl-base/5.22.1-9ubuntu0.9
+deb/procps/2:3.3.10-4ubuntu2.5
+deb/readline-common/6.3-8ubuntu2
+deb/sed/4.2.2-7
+deb/sensible-utils/0.0.9ubuntu0.16.04.1
+deb/systemd/229-4ubuntu21.31
+deb/systemd-sysv/229-4ubuntu21.31
+deb/sysv-rc/2.88dsf-59.3ubuntu2
+deb/sysvinit-utils/2.88dsf-59.3ubuntu2
+deb/tar/1.28-2.1ubuntu0.2
+deb/ubuntu-keyring/2012.05.19.1
+deb/util-linux/2.27.1-6ubuntu3.10
+deb/zlib1g/1:1.2.8.dfsg-2ubuntu4.3
+
diff --git a/test/sbom/testdata/ubuntu-18-04-cli.txt b/test/sbom/testdata/ubuntu-18-04-cli.txt
new file mode 100644
index 0000000000..8d048decaa
--- /dev/null
+++ b/test/sbom/testdata/ubuntu-18-04-cli.txt
@@ -0,0 +1,90 @@
+deb/adduser/3.116ubuntu1
+deb/apt/1.6.17
+deb/base-files/10.1ubuntu2.11
+deb/base-passwd/3.5.44
+deb/bash/4.4.18-2ubuntu1.3
+deb/bsdutils/1:2.31.1-0.4ubuntu3.7
+deb/bzip2/1.0.6-8.1ubuntu0.2
+deb/coreutils/8.28-1ubuntu1
+deb/dash/0.5.8-2.10
+deb/debconf/1.5.66ubuntu1
+deb/debianutils/4.8.4
+deb/diffutils/1:3.6-1
+deb/dpkg/1.19.0.5ubuntu2.4
+deb/e2fsprogs/1.44.1-1ubuntu1.4
+deb/fdisk/2.31.1-0.4ubuntu3.7
+deb/findutils/4.6.0+git+20170828-2
+deb/gcc-8-base/8.4.0-1ubuntu1~18.04
+deb/gpgv/2.2.4-1ubuntu1.6
+deb/grep/3.1-2build1
+deb/gzip/1.6-5ubuntu1.2
+deb/hostname/3.20
+deb/init-system-helpers/1.51
+deb/libacl1/2.2.52-3build1
+deb/libapt-pkg5.0/1.6.17
+deb/libattr1/1:2.4.47-2build1
+deb/libaudit-common/1:2.8.2-1ubuntu1.1
+deb/libaudit1/1:2.8.2-1ubuntu1.1
+deb/libblkid1/2.31.1-0.4ubuntu3.7
+deb/libbz2-1.0/1.0.6-8.1ubuntu0.2
+deb/libc-bin/2.27-3ubuntu1.6
+deb/libc6/2.27-3ubuntu1.6
+deb/libcap-ng0/0.7.7-3.1
+deb/libcom-err2/1.44.1-1ubuntu1.4
+deb/libdb5.3/5.3.28-13.1ubuntu1.1
+deb/libdebconfclient0/0.213ubuntu1
+deb/libext2fs2/1.44.1-1ubuntu1.4
+deb/libfdisk1/2.31.1-0.4ubuntu3.7
+deb/libffi6/3.2.1-8
+deb/libgcc1/1:8.4.0-1ubuntu1~18.04
+deb/libgcrypt20/1.8.1-4ubuntu1.3
+deb/libgmp10/2:6.1.2+dfsg-2ubuntu0.1
+deb/libgnutls30/3.5.18-1ubuntu1.6
+deb/libgpg-error0/1.27-6
+deb/libhogweed4/3.4.1-0ubuntu0.18.04.1
+deb/libidn2-0/2.0.4-1.1ubuntu0.2
+deb/liblz4-1/0.0~r131-2ubuntu3.1
+deb/liblzma5/5.2.2-1.3ubuntu0.1
+deb/libmount1/2.31.1-0.4ubuntu3.7
+deb/libncurses5/6.1-1ubuntu1.18.04.1
+deb/libncursesw5/6.1-1ubuntu1.18.04.1
+deb/libnettle6/3.4.1-0ubuntu0.18.04.1
+deb/libp11-kit0/0.23.9-2ubuntu0.1
+deb/libpam-modules/1.1.8-3.6ubuntu2.18.04.6
+deb/libpam-modules-bin/1.1.8-3.6ubuntu2.18.04.6
+deb/libpam-runtime/1.1.8-3.6ubuntu2.18.04.6
+deb/libpam0g/1.1.8-3.6ubuntu2.18.04.6
+deb/libpcre3/2:8.39-9ubuntu0.1
+deb/libprocps6/2:3.3.12-3ubuntu1.2
+deb/libseccomp2/2.5.1-1ubuntu1~18.04.2
+deb/libselinux1/2.7-2build2
+deb/libsemanage-common/2.7-2build2
+deb/libsemanage1/2.7-2build2
+deb/libsepol1/2.7-1ubuntu0.1
+deb/libsmartcols1/2.31.1-0.4ubuntu3.7
+deb/libss2/1.44.1-1ubuntu1.4
+deb/libstdc++6/8.4.0-1ubuntu1~18.04
+deb/libsystemd0/237-3ubuntu10.57
+deb/libtasn1-6/4.13-2
+deb/libtinfo5/6.1-1ubuntu1.18.04.1
+deb/libudev1/237-3ubuntu10.57
+deb/libunistring2/0.9.9-0ubuntu2
+deb/libuuid1/2.31.1-0.4ubuntu3.7
+deb/libzstd1/1.3.3+dfsg-2ubuntu1.2
+deb/login/1:4.5-1ubuntu2.5
+deb/lsb-base/9.20170808ubuntu1
+deb/mawk/1.3.3-17ubuntu3
+deb/mount/2.31.1-0.4ubuntu3.7
+deb/ncurses-base/6.1-1ubuntu1.18.04.1
+deb/ncurses-bin/6.1-1ubuntu1.18.04.1
+deb/passwd/1:4.5-1ubuntu2.5
+deb/perl-base/5.26.1-6ubuntu0.7
+deb/procps/2:3.3.12-3ubuntu1.2
+deb/sed/4.4-2
+deb/sensible-utils/0.0.12
+deb/sysvinit-utils/2.88dsf-59.10ubuntu1
+deb/tar/1.29b-2ubuntu0.4
+deb/ubuntu-keyring/2018.09.18.1~18.04.2
+deb/util-linux/2.31.1-0.4ubuntu3.7
+deb/zlib1g/1:1.2.11.dfsg-0ubuntu2.2
+
diff --git a/test/sbom/testdata/ubuntu-20-04-cli.txt b/test/sbom/testdata/ubuntu-20-04-cli.txt
new file mode 100644
index 0000000000..1f5f48df82
--- /dev/null
+++ b/test/sbom/testdata/ubuntu-20-04-cli.txt
@@ -0,0 +1,93 @@
+deb/adduser/3.118ubuntu2
+deb/apt/2.0.10
+deb/base-files/11ubuntu5.8
+deb/base-passwd/3.5.47
+deb/bash/5.0-6ubuntu1.2
+deb/bsdutils/1:2.34-0.1ubuntu9.4
+deb/bzip2/1.0.8-2
+deb/coreutils/8.30-3ubuntu2
+deb/dash/0.5.10.2-6
+deb/debconf/1.5.73
+deb/debianutils/4.9.1
+deb/diffutils/1:3.7-3
+deb/dpkg/1.19.7ubuntu3.2
+deb/e2fsprogs/1.45.5-2ubuntu1.1
+deb/fdisk/2.34-0.1ubuntu9.4
+deb/findutils/4.7.0-1ubuntu1
+deb/gcc-10-base/10.5.0-1ubuntu1~20.04
+deb/gpgv/2.2.19-3ubuntu2.2
+deb/grep/3.4-1
+deb/gzip/1.10-0ubuntu4.1
+deb/hostname/3.23
+deb/init-system-helpers/1.57
+deb/libacl1/2.2.53-6
+deb/libapt-pkg6.0/2.0.10
+deb/libattr1/1:2.4.48-5
+deb/libaudit-common/1:2.8.5-2ubuntu6
+deb/libaudit1/1:2.8.5-2ubuntu6
+deb/libblkid1/2.34-0.1ubuntu9.4
+deb/libbz2-1.0/1.0.8-2
+deb/libc-bin/2.31-0ubuntu9.14
+deb/libc6/2.31-0ubuntu9.14
+deb/libcap-ng0/0.7.9-2.1build1
+deb/libcom-err2/1.45.5-2ubuntu1.1
+deb/libcrypt1/1:4.4.10-10ubuntu4
+deb/libdb5.3/5.3.28+dfsg1-0.6ubuntu2
+deb/libdebconfclient0/0.251ubuntu1
+deb/libext2fs2/1.45.5-2ubuntu1.1
+deb/libfdisk1/2.34-0.1ubuntu9.4
+deb/libffi7/3.3-4
+deb/libgcc-s1/10.5.0-1ubuntu1~20.04
+deb/libgcrypt20/1.8.5-5ubuntu1.1
+deb/libgmp10/2:6.2.0+dfsg-4ubuntu0.1
+deb/libgnutls30/3.6.13-2ubuntu1.10
+deb/libgpg-error0/1.37-1
+deb/libhogweed5/3.5.1+really3.5.1-2ubuntu0.2
+deb/libidn2-0/2.2.0-2
+deb/liblz4-1/1.9.2-2ubuntu0.20.04.1
+deb/liblzma5/5.2.4-1ubuntu1.1
+deb/libmount1/2.34-0.1ubuntu9.4
+deb/libncurses6/6.2-0ubuntu2.1
+deb/libncursesw6/6.2-0ubuntu2.1
+deb/libnettle7/3.5.1+really3.5.1-2ubuntu0.2
+deb/libp11-kit0/0.23.20-1ubuntu0.1
+deb/libpam-modules/1.3.1-5ubuntu4.7
+deb/libpam-modules-bin/1.3.1-5ubuntu4.7
+deb/libpam-runtime/1.3.1-5ubuntu4.7
+deb/libpam0g/1.3.1-5ubuntu4.7
+deb/libpcre2-8-0/10.34-7ubuntu0.1
+deb/libpcre3/2:8.39-12ubuntu0.1
+deb/libprocps8/2:3.3.16-1ubuntu2.4
+deb/libseccomp2/2.5.1-1ubuntu1~20.04.2
+deb/libselinux1/3.0-1build2
+deb/libsemanage-common/3.0-1build2
+deb/libsemanage1/3.0-1build2
+deb/libsepol1/3.0-1ubuntu0.1
+deb/libsmartcols1/2.34-0.1ubuntu9.4
+deb/libss2/1.45.5-2ubuntu1.1
+deb/libstdc++6/10.5.0-1ubuntu1~20.04
+deb/libsystemd0/245.4-4ubuntu3.23
+deb/libtasn1-6/4.16.0-2
+deb/libtinfo6/6.2-0ubuntu2.1
+deb/libudev1/245.4-4ubuntu3.23
+deb/libunistring2/0.9.10-2
+deb/libuuid1/2.34-0.1ubuntu9.4
+deb/libzstd1/1.4.4+dfsg-3ubuntu0.1
+deb/login/1:4.8.1-1ubuntu5.20.04.4
+deb/logsave/1.45.5-2ubuntu1.1
+deb/lsb-base/11.1.0ubuntu2
+deb/mawk/1.3.4.20200120-2
+deb/mount/2.34-0.1ubuntu9.4
+deb/ncurses-base/6.2-0ubuntu2.1
+deb/ncurses-bin/6.2-0ubuntu2.1
+deb/passwd/1:4.8.1-1ubuntu5.20.04.4
+deb/perl-base/5.30.0-9ubuntu0.5
+deb/procps/2:3.3.16-1ubuntu2.4
+deb/sed/4.7-1
+deb/sensible-utils/0.0.12+nmu1
+deb/sysvinit-utils/2.96-2.1ubuntu1
+deb/tar/1.30+dfsg-7ubuntu0.20.04.4
+deb/ubuntu-keyring/2020.02.11.4
+deb/util-linux/2.34-0.1ubuntu9.4
+deb/zlib1g/1:1.2.11.dfsg-2ubuntu1.5
+
diff --git a/test/sbom/testdata/ubuntu-22-04-cli.txt b/test/sbom/testdata/ubuntu-22-04-cli.txt
new file mode 100644
index 0000000000..bf9f51fb4f
--- /dev/null
+++ b/test/sbom/testdata/ubuntu-22-04-cli.txt
@@ -0,0 +1,102 @@
+deb/adduser/3.118ubuntu5
+deb/apt/2.4.11
+deb/base-files/12ubuntu4.5
+deb/base-passwd/3.5.52build1
+deb/bash/5.1-6ubuntu1
+deb/bsdutils/1:2.37.2-4ubuntu3
+deb/coreutils/8.32-4.1ubuntu1
+deb/dash/0.5.11+git20210903+057cd650a4ed-3build1
+deb/debconf/1.5.79ubuntu1
+deb/debianutils/5.5-1ubuntu2
+deb/diffutils/1:3.8-0ubuntu2
+deb/dpkg/1.21.1ubuntu2.2
+deb/e2fsprogs/1.46.5-2ubuntu1.1
+deb/findutils/4.8.0-1ubuntu3
+deb/gcc-12-base/12.3.0-1ubuntu1~22.04
+deb/gpgv/2.2.27-3ubuntu2.1
+deb/grep/3.7-1build1
+deb/gzip/1.10-4ubuntu4.1
+deb/hostname/3.23ubuntu2
+deb/init-system-helpers/1.62
+deb/libacl1/2.3.1-1
+deb/libapt-pkg6.0/2.4.11
+deb/libattr1/1:2.5.1-1build1
+deb/libaudit-common/1:3.0.7-1build1
+deb/libaudit1/1:3.0.7-1build1
+deb/libblkid1/2.37.2-4ubuntu3
+deb/libbz2-1.0/1.0.8-5build1
+deb/libc-bin/2.35-0ubuntu3.6
+deb/libc6/2.35-0ubuntu3.6
+deb/libcap-ng0/0.7.9-2.2build3
+deb/libcap2/1:2.44-1ubuntu0.22.04.1
+deb/libcom-err2/1.46.5-2ubuntu1.1
+deb/libcrypt1/1:4.4.27-1
+deb/libdb5.3/5.3.28+dfsg1-0.8ubuntu3
+deb/libdebconfclient0/0.261ubuntu1
+deb/libext2fs2/1.46.5-2ubuntu1.1
+deb/libffi8/3.4.2-4
+deb/libgcc-s1/12.3.0-1ubuntu1~22.04
+deb/libgcrypt20/1.9.4-3ubuntu3
+deb/libgmp10/2:6.2.1+dfsg-3ubuntu1
+deb/libgnutls30/3.7.3-4ubuntu1.4
+deb/libgpg-error0/1.43-3
+deb/libgssapi-krb5-2/1.19.2-2ubuntu0.3
+deb/libhogweed6/3.7.3-1build2
+deb/libidn2-0/2.3.2-2build1
+deb/libk5crypto3/1.19.2-2ubuntu0.3
+deb/libkeyutils1/1.6.1-2ubuntu3
+deb/libkrb5-3/1.19.2-2ubuntu0.3
+deb/libkrb5support0/1.19.2-2ubuntu0.3
+deb/liblz4-1/1.9.3-2build2
+deb/liblzma5/5.2.5-2ubuntu1
+deb/libmount1/2.37.2-4ubuntu3
+deb/libncurses6/6.3-2ubuntu0.1
+deb/libncursesw6/6.3-2ubuntu0.1
+deb/libnettle8/3.7.3-1build2
+deb/libnsl2/1.3.0-2build2
+deb/libp11-kit0/0.24.0-6build1
+deb/libpam-modules/1.4.0-11ubuntu2.4
+deb/libpam-modules-bin/1.4.0-11ubuntu2.4
+deb/libpam-runtime/1.4.0-11ubuntu2.4
+deb/libpam0g/1.4.0-11ubuntu2.4
+deb/libpcre2-8-0/10.39-3ubuntu0.1
+deb/libpcre3/2:8.39-13ubuntu0.22.04.1
+deb/libprocps8/2:3.3.17-6ubuntu2.1
+deb/libseccomp2/2.5.3-2ubuntu2
+deb/libselinux1/3.3-1build2
+deb/libsemanage-common/3.3-1build2
+deb/libsemanage2/3.3-1build2
+deb/libsepol2/3.3-1build1
+deb/libsmartcols1/2.37.2-4ubuntu3
+deb/libss2/1.46.5-2ubuntu1.1
+deb/libssl3/3.0.2-0ubuntu1.13
+deb/libstdc++6/12.3.0-1ubuntu1~22.04
+deb/libsystemd0/249.11-0ubuntu3.12
+deb/libtasn1-6/4.18.0-4build1
+deb/libtinfo6/6.3-2ubuntu0.1
+deb/libtirpc-common/1.3.2-2ubuntu0.1
+deb/libtirpc3/1.3.2-2ubuntu0.1
+deb/libudev1/249.11-0ubuntu3.12
+deb/libunistring2/1.0-1
+deb/libuuid1/2.37.2-4ubuntu3
+deb/libxxhash0/0.8.1-1
+deb/libzstd1/1.4.8+dfsg-3build1
+deb/login/1:4.8.1-2ubuntu2.1
+deb/logsave/1.46.5-2ubuntu1.1
+deb/lsb-base/11.1.0ubuntu4
+deb/mawk/1.3.4.20200120-3
+deb/mount/2.37.2-4ubuntu3
+deb/ncurses-base/6.3-2ubuntu0.1
+deb/ncurses-bin/6.3-2ubuntu0.1
+deb/passwd/1:4.8.1-2ubuntu2.1
+deb/perl-base/5.34.0-3ubuntu1.3
+deb/procps/2:3.3.17-6ubuntu2.1
+deb/sed/4.8-1ubuntu2
+deb/sensible-utils/0.0.17
+deb/sysvinit-utils/3.01-1ubuntu1
+deb/tar/1.34+dfsg-1ubuntu0.1.22.04.2
+deb/ubuntu-keyring/2021.03.26
+deb/usrmerge/25ubuntu2
+deb/util-linux/2.37.2-4ubuntu3
+deb/zlib1g/1:1.2.11.dfsg-2ubuntu9.2
+