From: Joshua Watt <[email protected]> The CPE reference type should be the short name ("cpe23Type") not the full RDF IRI.
Signed-off-by: Joshua Watt <[email protected]> Signed-off-by: Mathieu Dubois-Briand <[email protected]> Signed-off-by: Richard Purdie <[email protected]> (cherry picked from commit 44dc2f9a4ad7dd0e0debc08d02d3a3b3f38e7f12) Signed-off-by: Ankur Tyagi <[email protected]> --- meta/classes/create-spdx-2.2.bbclass | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/meta/classes/create-spdx-2.2.bbclass b/meta/classes/create-spdx-2.2.bbclass index 94e0108815..0ffaeba0e9 100644 --- a/meta/classes/create-spdx-2.2.bbclass +++ b/meta/classes/create-spdx-2.2.bbclass @@ -489,7 +489,7 @@ python do_create_spdx() { for cpe_id in cpe_ids: cpe = oe.spdx.SPDXExternalReference() cpe.referenceCategory = "SECURITY" - cpe.referenceType = "http://spdx.org/rdf/references/cpe23Type"; + cpe.referenceType = "cpe23Type" cpe.referenceLocator = cpe_id recipe.externalRefs.append(cpe)
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#227676): https://lists.openembedded.org/g/openembedded-core/message/227676 Mute This Topic: https://lists.openembedded.org/mt/116760457/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
