diff options
Diffstat (limited to 'documentation/dev-manual')
| -rw-r--r-- | documentation/dev-manual/sbom.rst | 15 |
1 files changed, 4 insertions, 11 deletions
diff --git a/documentation/dev-manual/sbom.rst b/documentation/dev-manual/sbom.rst index 6949675c25..3d72a689e9 100644 --- a/documentation/dev-manual/sbom.rst +++ b/documentation/dev-manual/sbom.rst | |||
| @@ -30,16 +30,9 @@ To make this happen, you must inherit the | |||
| 30 | 30 | ||
| 31 | INHERIT += "create-spdx" | 31 | INHERIT += "create-spdx" |
| 32 | 32 | ||
| 33 | Upon building an image, you will then get: | 33 | Upon building an image, you will then get the compressed archive |
| 34 | 34 | ``IMAGE-MACHINE.spdx.tar.zst`` contains the index and the files for the single | |
| 35 | - :term:`SPDX` output in JSON format as an ``IMAGE-MACHINE.spdx.json`` file in | 35 | recipes. |
| 36 | ``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`. | ||
| 37 | |||
| 38 | - This toplevel file is accompanied by an ``IMAGE-MACHINE.spdx.index.json`` | ||
| 39 | containing an index of JSON :term:`SPDX` files for individual recipes. | ||
| 40 | |||
| 41 | - The compressed archive ``IMAGE-MACHINE.spdx.tar.zst`` contains the index | ||
| 42 | and the files for the single recipes. | ||
| 43 | 36 | ||
| 44 | The :ref:`ref-classes-create-spdx` class offers options to include | 37 | The :ref:`ref-classes-create-spdx` class offers options to include |
| 45 | more information in the output :term:`SPDX` data: | 38 | more information in the output :term:`SPDX` data: |
| @@ -56,7 +49,7 @@ more information in the output :term:`SPDX` data: | |||
| 56 | 49 | ||
| 57 | Though the toplevel :term:`SPDX` output is available in | 50 | Though the toplevel :term:`SPDX` output is available in |
| 58 | ``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`, ancillary | 51 | ``tmp/deploy/images/MACHINE/`` inside the :term:`Build Directory`, ancillary |
| 59 | generated files are available in ``tmp/deploy/spdx/MACHINE`` too, such as: | 52 | generated files are available in ``tmp/deploy/spdx`` too, such as: |
| 60 | 53 | ||
| 61 | - The individual :term:`SPDX` JSON files in the ``IMAGE-MACHINE.spdx.tar.zst`` | 54 | - The individual :term:`SPDX` JSON files in the ``IMAGE-MACHINE.spdx.tar.zst`` |
| 62 | archive. | 55 | archive. |
