Backports support to creates SPDX during the build from the master branch, with a few changes to make it compatible with dunfell. Primarily, the SPDX data is compressed with gzip instead of zstd to prevent needing the zstd host tools on the older distros supported by dunfell
Joshua Watt (5): classes/create-spdx: Backport classes/package: Add extended packaged data licenses: Add GPL+ licenses to map create-spdx: Use gzip for compression classes/package: Use gzip for extended package data meta/classes/create-spdx-2.2.bbclass | 1067 +++++ meta/classes/create-spdx.bbclass | 8 + meta/classes/package.bbclass | 39 +- meta/conf/licenses.conf | 7 + meta/files/spdx-licenses.json | 5937 ++++++++++++++++++++++++++ meta/lib/oe/packagedata.py | 11 + meta/lib/oe/sbom.py | 84 + meta/lib/oe/spdx.py | 357 ++ 8 files changed, 7507 insertions(+), 3 deletions(-) create mode 100644 meta/classes/create-spdx-2.2.bbclass create mode 100644 meta/classes/create-spdx.bbclass create mode 100644 meta/files/spdx-licenses.json create mode 100644 meta/lib/oe/sbom.py create mode 100644 meta/lib/oe/spdx.py -- 2.33.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#178956): https://lists.openembedded.org/g/openembedded-core/message/178956 Mute This Topic: https://lists.openembedded.org/mt/97787868/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
