Hello everyone,

while reviewing CPE identifiers, and experimenting with SBOM files,
I came across some minor issues with the SPDX SBOM generator.
Not entirely sure if this can cause compatibility problems, maybe
depends on what people use that sbom for already.  So review carefully!

(Did not look into the other SBOM format (yet?).)

Greets
Alex

Alexander Dahl (3):
  report: spdx_sbom: Fixed "created" field format
  report: spdx_sbom: Fix externalPackageRef type in category SECURITY
  report: spdx_sbom: Convert pkg_name into valid idstring

 scripts/report/spdx_sbom.py | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)


base-commit: c19a3c3a7191849f857ca396792ae919197ae9c8
-- 
2.47.3


Reply via email to