Hi Marco > I see that meta-spdxscanner has been moved to http://git.yoctoproject.org, > and doesn't maintained on github Yes, you can contact me or contribute to meta-spdxscanner to this ML.
> I'd like to have advice from you to understand if is it possible to test it > without > any external service and discover what kind of artefacts are generated into > deploy/spdx. I have not maintained scancode-tk for long time. And recently there are somebody else asked me about scancode-tk. Yes, I planned to make scancode-tk.bbclass work without external service. But there are always issues because environment. The problem of scancode-tk.bbclass that scancode must work with specify a version of python(latest requires 3.6), but you know that for YP or your host, it is hard to meet the requirement. I found the newest version of scancode-tk support running in docker. So I plan to make scancode-tk.bbclass work with scancode command by docker next. Of course, if you have good ideas, please tell me, or contribute to meta-spdxscanner directlly. By the way, why not try fossology? It is really good that you can browse the compliance information on fossology server after you get spdx files by bitbake of YP. Best regards Lei > -----Original Message----- > From: [email protected] <[email protected]> On Behalf > Of Marco Cavallini > Sent: Monday, July 12, 2021 9:09 PM > To: [email protected] > Cc: Lei, Maohui <[email protected]> > Subject: [yocto] [meta-spdxscanner] Question about meta-spdxscanner > > Hello, > I see that meta-spdxscanner has been moved to http://git.yoctoproject.org, > and doesn't maintained on github > anymore.https://github.com/dl9pf/meta-spdxscanner/issues/21 > > Therefore the only way to get in contact to developers is writing to this ML > > I am trying to understand how meta-spdxscanner works. > I'd like to test it without any external service (no Fossology) therefore I am > trying the INHERIT += "scancode-tk" approach. > > I am testing it with a dunfell version and I noticed a lot of errors so I > switched to > master and the bitbake build started but again I am facing to a problem > > ERROR: bash-completion-2.10-r0 do_get_report: Could not invoke scancode > Command > > I'd like to have advice from you to understand if is it possible to test it > without > any external service and discover what kind of artefacts are generated into > deploy/spdx. > > Thank you > > -- > Marco
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#54110): https://lists.yoctoproject.org/g/yocto/message/54110 Mute This Topic: https://lists.yoctoproject.org/mt/84152843/21656 Group Owner: [email protected] Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
