On Wed, Sep 6, 2017 at 7:51 AM, Neal Gompa <[email protected]> wrote:
>
> I'd like to point out that this recommendation is contingent on being
> able to automatically scan and generate it. No one is suggesting
> manual inventory of code to generate SPDX document.
Hi Neal,
We agree, some tooling is needed to generate the signing of the
files that is needed in an SPDX document for an accurate manifest.
Both FOSSology and ScanCode are open source projects that
scan source projects and generate SPDX documents. Windriver
also provides a service to do so too.
Kate
_______________________________________________
Spdx mailing list
[email protected]
https://lists.spdx.org/mailman/listinfo/spdx
