Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Luca Ceresoli via lists.openembedded.org
Hello Andrej, On Thu, 22 Jun 2023 14:07:41 + "Andrej Valek via lists.openembedded.org" wrote: > OK, > > Now I know what's the problem. SPDX are being created without inheriting the > cve-check class. > > Regards, > Andrej > > On Thu, 2023-06-22 at 15:59 +0200, Valek Andrej wrote: > >

Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Andrej Valek via lists.openembedded.org
OK, Now I know what's the problem. SPDX are being created without inheriting the cve-check class. Regards, Andrej On Thu, 2023-06-22 at 15:59 +0200, Valek Andrej wrote: > Hello Luca, > > I wanted to check the logs, but it requires a login/password. Would it be > possible to send a link where

Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Andrej Valek via lists.openembedded.org
Hello Luca, I wanted to check the logs, but it requires a login/password. Would it be possible to send a link where is not required? Maybe here https://autobuilder.yoctoproject.org/typhoon/#/ ? Regards, Andrej On Thu, 2023-06-22 at 15:55 +0200, Luca Ceresoli wrote: > Hello Andrej, > > On Thu,

Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Luca Ceresoli via lists.openembedded.org
Hello Andrej, On Thu, 22 Jun 2023 13:50:32 + "Andrej Valek via lists.openembedded.org" wrote: > Hello Luca, > > How can I reproduce it? I've executed "bitbake qemu -c create_spdx" but it > didn't print any warning. Should I build an image? I don't know how to reproduce _exactly_ the build

Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Andrej Valek via lists.openembedded.org
Hello Luca, How can I reproduce it? I've executed "bitbake qemu -c create_spdx" but it didn't print any warning. Should I build an image? Regards, Andrej On Thu, 2023-06-22 at 14:42 +0200, Luca Ceresoli wrote: > Hello Andrej, > > On Thu, 22 Jun 2023 08:59:02 +0200 > "Andrej Valek via

Re: [OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Luca Ceresoli via lists.openembedded.org
Hello Andrej, On Thu, 22 Jun 2023 08:59:02 +0200 "Andrej Valek via lists.openembedded.org" wrote: > After discussion in all parallel threads we proposed following variant which > covers both expressed requirements to have very small number of different cve > statuses and also very large number

[OE-core][PATCH v7 0/3] CVE-check handling

2023-06-22 Thread Andrej Valek via lists.openembedded.org
After discussion in all parallel threads we proposed following variant which covers both expressed requirements to have very small number of different cve statuses and also very large number of them at the same time. This is a compromise version which maybe is not ideal but deals with conflicting