diff options
| author | Hongxu Jia <hongxu.jia@windriver.com> | 2025-04-28 13:57:17 +0800 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2025-05-08 10:28:18 +0100 |
| commit | 2207150bc74811cce9df72464ce867e6f6b8b3ec (patch) | |
| tree | 42f104bf8d2e08be629bbf23d04793ef61cf8700 /documentation/contributor-guide | |
| parent | 26b1de046e9566ee1156e212ce9b5ba8cd5a12d6 (diff) | |
| download | poky-2207150bc74811cce9df72464ce867e6f6b8b3ec.tar.gz | |
spdx30: Provide software_packageUrl field in SPDX 3.0 SBOM
Define var-SPDX_PACKAGE_URL to provide software_packageUrl field [1][2]
in SPDX 3.0 SBOM, support to override with package name
SPDX_PACKAGE_URL:<pkgname>
Currently, the format of purl is not defined in Yocto, set empty for now
until we have a comprehensive plan for what Yocto purls look like.
But users could customize their own purl by setting var-SPDX_PACKAGE_URL
[1] https://spdx.github.io/spdx-spec/v3.0.1/model/Software/Properties/packageUrl/
[2] https://spdx.github.io/spdx-spec/v3.0.1/annexes/pkg-url-specification/
(From OE-Core rev: c8e6953a0b6f59ffca994c440069db39e60b12d2)
Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'documentation/contributor-guide')
0 files changed, 0 insertions, 0 deletions