That sounds great, but where do I set PROJECT_DEFAULT_REPORTS?

Ralf

________________________________
Von: Michael Olbrich <[email protected]>
Gesendet: Samstag, 26. April 2025 12:27
An: Ralf Glaser <[email protected]>
Cc: [email protected] <[email protected]>
Betreff: Re: [ptxdist] CRA and SBOM

On Fri, Apr 25, 2025 at 01:09:52PM +0000, Ralf Glaser wrote:
> will there be any support for SBOM generation in ptxdist (as we are all
> required by the CRA to provide this)?

PTXdist has support to generate SBoMs. It's just not really documented.

Set PROJECT_DEFAULT_REPORTS to "spdx-sbom" and either enable
PROJECT_GENERATE_REPORTS to generate the SBoM when images are built or run
"ptxdist make image-reports" to generate them manually.

Michael

--
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |

Reply via email to