Thanks, applied as 484097bacab0b8987074a54b86b28969bbe351c9. Michael
[sent from post-receive hook] On Mon, 21 Sep 2026 08:38:21 +0200, Alexander Dahl <[email protected]> wrote: > For referenced elements the SPDX spec does not allow '_' in names, but > we have packages like for example 'lm_sensors'. > > Link: > https://spdx.github.io/spdx-spec/v2.3/package-information/#72-package-spdx-identifier-field > Signed-off-by: Alexander Dahl <[email protected]> > Message-Id: <[email protected]> > Signed-off-by: Michael Olbrich <[email protected]> > > diff --git a/scripts/report/spdx_sbom.py b/scripts/report/spdx_sbom.py > index 7c4f1c6bbd1b..252828bc5136 100644 > --- a/scripts/report/spdx_sbom.py > +++ b/scripts/report/spdx_sbom.py > @@ -50,7 +50,7 @@ class SpdxSbomGenerator(SbomGenerator): > > spdx_pkg = spdx.SPDXPackage() > spdx_pkg.name = pkg_name > - spdx_pkg.SPDXID = "SPDXRef-" + pkg_name > + spdx_pkg.SPDXID = "SPDXRef-" + pkg_name.replace('_', '-') > if "version" in pkg: > spdx_pkg.versionInfo = pkg["version"] > if "url" in pkg:
