Can ORT be used to enrich the existing SPDX file ?

[dineshr93]

In Doc, ORT can generate spdx but If there is half baked spdx (with only deps info) can ORT be used consume spdx and enrich with license and copyright data?

[sschuberth]

In theory, that should be possible by using the "half baked" SPDX file as input to the SpdxDocumentFile analyzer, running the scanner step, and then the reporter to output a new SPDX file which should contain everything from the original SPDX file plus scanner results.

In practice, though, you'll mostly likely run into all kinds of issues WRT different representation of semantically the same thing in different SPDX syntax, as SPDX in not very concise in this regard. But feel free to give it a try and share your experiences.