The CPE reference type should be the short name ("cpe23Type") not the
full RDF IRI.Signed-off-by: Joshua Watt <[email protected]> --- meta/classes/create-spdx-2.2.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/create-spdx-2.2.bbclass b/meta/classes/create-spdx-2.2.bbclass index 94e0108815..0ffaeba0e9 100644 --- a/meta/classes/create-spdx-2.2.bbclass +++ b/meta/classes/create-spdx-2.2.bbclass @@ -489,7 +489,7 @@ python do_create_spdx() { for cpe_id in cpe_ids: cpe = oe.spdx.SPDXExternalReference() cpe.referenceCategory = "SECURITY" - cpe.referenceType = "http://spdx.org/rdf/references/cpe23Type"; + cpe.referenceType = "cpe23Type" cpe.referenceLocator = cpe_id recipe.externalRefs.append(cpe) -- 2.52.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#227230): https://lists.openembedded.org/g/openembedded-core/message/227230 Mute This Topic: https://lists.openembedded.org/mt/116594508/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
