linux/poky.git/meta/lib/oe/sbom.py, branch yocto-4.0.7

classes/create-spdx: Add SPDX_PRETTY option

2023-01-06T17:33:23+00:00

Adds an option to make the SPDX more human-readable (at the expense of a larger files) (From OE-Core rev: e680a7402edec2803b03c56590c9d08d07497c73) Signed-off-by: Joshua Watt Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 4799594b26f77ed259dc661bf077519b338390c8) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

create-spdx: add support for SDKs

2022-02-25T12:41:23+00:00

Currently, SPDX SBOMs are only created for images. Add support for SDKs. (From OE-Core rev: c3acbb936a339636153903daf127eec9f36de79b) Signed-off-by: Andres Beltran Signed-off-by: Richard Purdie

classes/create-spdx: Add runtime dependency mapping

2021-09-03T08:53:28+00:00

(From OE-Core rev: 82f3229bce41dc101c79865033432161dac269d8) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie

classes/create-spdx: Add SHA1 to index file

2021-09-03T08:53:28+00:00

(From OE-Core rev: ebfe78ad26b643ce0fb22ba5b3ede43da4a78987) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie

classes/create-spdx: Add class

2021-09-03T08:53:28+00:00

Adds a class as a first attempt to create SPDX SBoM documents during the build. This initial work was influenced by [meta-doubleopen][1], although almost completely rewritten. [1]: https://github.com/doubleopen-project/meta-doubleopen (From OE-Core rev: 78c79821ae7e2f060b9a74ea9aefce98102bb00e) Signed-off-by: Joshua Watt Signed-off-by: Richard Purdie