I believe this is unnecessary now with the patch set I just published
that allows SPDX documents to be aggregated across "deploy" tasks
(e.g. do_deploy, do_image_complete).

On Tue, Jun 9, 2026 at 5:48 AM Peter Marko <[email protected]> wrote:
>
> From: Peter Marko <[email protected]>
>
> Including image in another image is being done by depending on
> do_image_complete. This however does not include SPDX SBOM.
> We should not need second bitbake execution to create it.
>
> Recursively add do_create_image_sbom_spdx to do_build to resolve it.
>
> Use-case are e.g. fitimage or multiconfig containers.
>
> Signed-off-by: Peter Marko <[email protected]>
> ---
>  meta/classes-recipe/create-spdx-image-3.0.bbclass | 1 +
>  1 file changed, 1 insertion(+)
>
> diff --git a/meta/classes-recipe/create-spdx-image-3.0.bbclass 
> b/meta/classes-recipe/create-spdx-image-3.0.bbclass
> index 15a91e90e2..4d6a6424fe 100644
> --- a/meta/classes-recipe/create-spdx-image-3.0.bbclass
> +++ b/meta/classes-recipe/create-spdx-image-3.0.bbclass
> @@ -78,6 +78,7 @@ do_create_image_sbom_spdx[stamp-extra-info] = 
> "${MACHINE_ARCH}"
>  do_create_image_sbom_spdx[cleandirs] = "${SPDXIMAGEDEPLOYDIR}"
>  do_create_image_sbom_spdx[recrdeptask] += "do_create_recipe_spdx 
> do_create_spdx do_create_package_spdx"
>  do_create_image_sbom_spdx[file-checksums] += "${SPDX3_DEP_FILES}"
> +do_build[recrdeptask] += "do_create_image_sbom_spdx"
>
>  python do_create_image_sbom_spdx_setscene() {
>      sstate_setscene(d)
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#238309): 
https://lists.openembedded.org/g/openembedded-core/message/238309
Mute This Topic: https://lists.openembedded.org/mt/119721184/21656
Group Owner: [email protected]
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to