linux/poky.git/meta/lib/oe/spdx.py, branch yocto-3.4.3Mirror of git.yoctoproject.org/pokyhttps://git.enea.com/cgit/linux/poky.git/atom?h=yocto-3.4.32021-11-08T23:41:00+00:00spdx.py: Add annotation to relationship2021-11-08T23:41:00+00:00Saul WoldSaul.Wold@windriver.com2021-10-27T01:30:48+00:00urn:sha1:4c9414b35d88d1551643cc51434025a0267c4e26
Having annotations on relationship can provide additional information
about the relationship such as how it was derived.
(From OE-Core rev: 37a29bd732cb917da4930ef624da72f5196732cc)
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit d98585aa89e1d3819f8139a07fb7376ef89b37f8)
Signed-off-by: Anuj Mittal <anuj.mittal@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
lib/oe/spdx.py: Add comments2021-09-28T16:55:04+00:00Joshua WattJPEWhacker@gmail.com2021-09-27T20:04:44+00:00urn:sha1:17bd442f1a36ae531ddd5858131dc12815640db3
Adds several comments to this file to explain the intention and how it
should be used
(From OE-Core rev: 0be0ba70e68b57a3617d3c1ea4b6233b37d5d648)
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
spdx.py: Add SPDXAnnotation Object2021-09-28T16:55:04+00:00Saul WoldSaul.Wold@windriver.com2021-09-27T17:22:16+00:00urn:sha1:859e6a0d00ff3c8c65cb13f837dbbc45d2676e68
This is added to allow the create-spdx code to create annotations
that store values properly according to the SPDX Specification.
Initialy they will be used to track if a recipe is a native type.
(From OE-Core rev: 8db551bba619f3b3612c59270043148214a462cc)
Signed-off-by: Saul Wold <saul.wold@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
classes/create-spdx: Fix up license reporting2021-09-03T08:53:28+00:00Joshua WattJPEWhacker@gmail.com2021-09-01T13:44:50+00:00urn:sha1:902480107dd0db7b77ada4654d2e0f061a04765d
Licenses reported in the SPDX documents should be either:
A) A valid SPDX identifier cross referenced from the SPDX license
database
B) A "LicenseRef" to a license described in the SPDX document
The licensing code will now add a placeholder extracted license with
corresponding "LicenseRef" for any licenses that are not matched to the
SPDX database
Parenthesis in the license expression are now handled correctly
(From OE-Core rev: 28d9d035c0ff8fcaf28bc96a976a43a602a47e94)
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
classes/create-spdx: Add class2021-09-03T08:53:28+00:00Joshua WattJPEWhacker@gmail.com2021-09-01T13:44:41+00:00urn:sha1:f1a34a63e44dc444ed213c48bfeab9da1196bfc8
Adds a class as a first attempt to create SPDX SBoM documents during the
build. This initial work was influenced by [meta-doubleopen][1],
although almost completely rewritten.
[1]: https://github.com/doubleopen-project/meta-doubleopen
(From OE-Core rev: 78c79821ae7e2f060b9a74ea9aefce98102bb00e)
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>