Proposal: Add a command to apply a JSLT transformation to an ORT result

[oheger-bosch]

JSLT [1] supports powerful transformations on JSON data. Possible use cases would be the conversion of existing results to conform to breaking changes in ORT's data model or the manipulation of results to generate test data. I played around with JSLT when I changed the data format for vulnerabilities in the Advisor module. As I found it useful, I thought I could share it. If you think, this is out of scope, just close this PR.

There is one limitation, however: JSLT does not handle tags in YAML and simply drops them. This is a problem with ORT result files because Jackson uses such tags to deal with class hierarchies. Currently the configuration of scan result storages makes use of this mechanism; so a manual post-processing of result files is necessary.

As an example for a JSLT transformation that could be applied, here is one that converts the advisor result section from the old format of vulnerabilities to the new one (as introduced in #3823):

{
  "advisor": {
    "results": {
      "advisor_results": {for(.advisor.results.advisor_results)
        .key: [for(.value) {
          "vulnerabilities": [for(.vulnerabilities) {
            "id": .id,
            "references": [
              {
                "url": .url,
                "severity": string(.severity)
              }
            ]
          }],
          "advisor": .advisor,
          "summary": .summary
        }]
      },
      * : .
    },
    * : .
  },
  * : .
}

[1] https://github.com/schibsted/jslt

[sschuberth]

I like the idea!

[mnonnenmacher]

I like the idea as well, just found two nit-picks.

Comment addressed.

[sschuberth]

@oheger-bosch can you please

1. rebase to get rid of a failing test,
2. add -i as an alias for --ort-result-file,
3. also add -i as an alias for the main input options to all other helper-cli commands (in a new commit).

[oheger-bosch]

The -i alias has been added to most of the helper commands; at least to those that support a unique input file (which is not necessarily always an ORT result).