Re: [ptxdist] SBOM / manifest

[Alexander Dahl <post@lespocky.de>]

[-- Attachment #1.1: Type: text/plain, Size: 1090 bytes --]

Hei hei,

On Tue, Oct 05, 2021 at 09:38:55AM -0400, Akshay Bhat wrote:
> Is there a way of generating a SBOM (Software Bill of Materials) i.e.
> list all the software packages installed on the target with the
> associated version and license info for a ptx-dist? Something similar
> 'make legal-info' in buildroot.

You can generate a license report like this:

  ptxdist make license-report

You'll find the report in platform-foo/report as .pdf afterwards.

> The closest I could find was:
> ptxdist list-packages | xargs ptxdist package-info | grep -e package:
> -e version: -e license:
> 
> Also are there any plans in the roadmap for supporting a SPDX SBOM?

Not sure. But the documentation has some hints: 

https://www.ptxdist.org/doc/dev_licenses.html

HTH & Greets
Alex

-- 
/"\ ASCII RIBBON | »With the first link, the chain is forged. The first
\ / CAMPAIGN     | speech censured, the first thought forbidden, the
 X  AGAINST      | first freedom denied, chains us all irrevocably.«
/ \ HTML MAIL    | (Jean-Luc Picard, quoting Judge Aaron Satie)

[-- Attachment #1.2: signature.asc --]
[-- Type: application/pgp-signature, Size: 833 bytes --]

[-- Attachment #2: Type: text/plain, Size: 181 bytes --]

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de