Hei hei, On Tue, Oct 05, 2021 at 09:38:55AM -0400, Akshay Bhat wrote: > Is there a way of generating a SBOM (Software Bill of Materials) i.e. > list all the software packages installed on the target with the > associated version and license info for a ptx-dist? Something similar > 'make legal-info' in buildroot. You can generate a license report like this: ptxdist make license-report You'll find the report in platform-foo/report as .pdf afterwards. > The closest I could find was: > ptxdist list-packages | xargs ptxdist package-info | grep -e package: > -e version: -e license: > > Also are there any plans in the roadmap for supporting a SPDX SBOM? Not sure. But the documentation has some hints: https://www.ptxdist.org/doc/dev_licenses.html HTH & Greets Alex -- /"\ ASCII RIBBON | »With the first link, the chain is forged. The first \ / CAMPAIGN | speech censured, the first thought forbidden, the X AGAINST | first freedom denied, chains us all irrevocably.« / \ HTML MAIL | (Jean-Luc Picard, quoting Judge Aaron Satie)