For referenced elements the SPDX spec does not allow '_' in names, but we have packages like for example 'lm_sensors'.
Link: https://spdx.github.io/spdx-spec/v2.3/package-information/#72-package-spdx-identifier-field Signed-off-by: Alexander Dahl <[email protected]> --- scripts/report/spdx_sbom.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/report/spdx_sbom.py b/scripts/report/spdx_sbom.py index 7c4f1c6bb..252828bc5 100644 --- a/scripts/report/spdx_sbom.py +++ b/scripts/report/spdx_sbom.py @@ -50,7 +50,7 @@ class SpdxSbomGenerator(SbomGenerator): spdx_pkg = spdx.SPDXPackage() spdx_pkg.name = pkg_name - spdx_pkg.SPDXID = "SPDXRef-" + pkg_name + spdx_pkg.SPDXID = "SPDXRef-" + pkg_name.replace('_', '-') if "version" in pkg: spdx_pkg.versionInfo = pkg["version"] if "url" in pkg: -- 2.47.3
