linux/poky.git/meta/lib/oe/sbom.py, branch 3.5_M2 Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=3.5_M2 2021-09-03T08:53:28+00:00 classes/create-spdx: Add runtime dependency mapping 2021-09-03T08:53:28+00:00 Joshua Watt JPEWhacker@gmail.com 2021-09-01T13:44:45+00:00 urn:sha1:0b871c57b8c3e45fd64d10037a32033d4a347d67 (From OE-Core rev: 82f3229bce41dc101c79865033432161dac269d8) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> classes/create-spdx: Add SHA1 to index file 2021-09-03T08:53:28+00:00 Joshua Watt JPEWhacker@gmail.com 2021-09-01T13:44:43+00:00 urn:sha1:f1cd4f264d206a3bf9d95cc1e632a476299643e3 (From OE-Core rev: ebfe78ad26b643ce0fb22ba5b3ede43da4a78987) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> classes/create-spdx: Add class 2021-09-03T08:53:28+00:00 Joshua Watt JPEWhacker@gmail.com 2021-09-01T13:44:41+00:00 urn:sha1:f1a34a63e44dc444ed213c48bfeab9da1196bfc8 Adds a class as a first attempt to create SPDX SBoM documents during the build. This initial work was influenced by [meta-doubleopen][1], although almost completely rewritten. [1]: https://github.com/doubleopen-project/meta-doubleopen (From OE-Core rev: 78c79821ae7e2f060b9a74ea9aefce98102bb00e) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>