From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 03 Jun 2025 16:47:47 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uMSvb-003Kzm-1U for lore@lore.pengutronix.de; Tue, 03 Jun 2025 16:47:47 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1uMSvb-0000tZ-5k; Tue, 03 Jun 2025 16:47:47 +0200 Received: from mail-germanywestcentralazon11022083.outbound.protection.outlook.com ([40.107.149.83] helo=FR4P281CU032.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1uMSvV-0000rZ-QZ for ptxdist@pengutronix.de; Tue, 03 Jun 2025 16:47:42 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=en9Gab1bi3BxRRxO+D96JWS0p8xVFwWinqyppLJXXgwh/847Ppvwqngm9t64oJ1Pf0WenvpEtfF1Ofl3+vIDFDUcNPji3G/v6+rYm7FtGvRp6ONn2YF9SEiJ1dO7EkyyvvQeSqe4LQdL/yb5srNwJLQ5ULR/fGQBCltbWGnVCpIwo+q5h/ZLt+lhwitgrm4PgGHVKKdHnFH278TnSrMTvxLgSPhU6frHiEo0HYUWM+nKG6wDQfex5fbyOrKm5+uEm3IRrGGnTxJQ3nF65a/eTZsE4XUgIZs66g0qVxhGDyjzkApMQRsz+9tTq+hEpJiv3yKcx2pACM+jUIrdUXZo9Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6K+JQUT8CJ3wmlZOsAGYcQUOu2SsqJlP4MguS6mGgUU=; b=DOli948jWhUAQHjgkGjCCR31tZdAO4rF5GzfXaOu3o15OA9Lw/jsinWyn7UIqolstB8P6BmHYbenmsK4Hh2M5M2jWqAjDlAdPywcLvbM4MniEWB/R9zWIA/1nSmba5gRPHXAIog55XXYL8B912Z+ExvkmCxI+PMKzPfAmnyjqUHMF4wNBhzLibMB6oIQLIgGLlWV8mZNca4YrfOt0IXC423/ionvLSXXlGnf2H9NuTb7ktyw62l07HRXgZhv33oS/vMQRzPCeQK9lKlGpeMvDNtKcMgV4TCAx9iHF0YNyb5JK62RJ8yef2MsVWoTU827VmTX8keoR2ulfVeuOBg6Ig== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=iotmaxx.de; dmarc=pass action=none header.from=iotmaxx.de; dkim=pass header.d=iotmaxx.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=iotmaxx.onmicrosoft.com; s=selector1-iotmaxx-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=6K+JQUT8CJ3wmlZOsAGYcQUOu2SsqJlP4MguS6mGgUU=; b=ksEf6sf+1RvVZMkOlhTa5HO+/gXUwAAIqC/VIhxKEkOOMAmSwSyUiOCuajtnrko5bHL8gsdC33efP1kfAyVT0MRo2q7gj4UQ1hlsbbJTRB3T5P/CKVoto+KSut+wuH35T5/5ls5nNG3hTtNgDd4p4DuJ+brLqc7megmSZdoiERS+RULddEUBzb/zb7HLPu6GFl6NVjdzTliABMN4UPePG9pf3ncxtDeQ/vWY8xpTN5SBA1LeHYn1L5x/rqA1MaekU7UvaWUwSKV2FJRETM6hwJdK62dXY1uuoES5avFh4+IDXUInnchzYrLKilOLUSWR9fJalcaIphAnfiM+zC32Vg== Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=iotmaxx.de; Received: from BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:64::12) by BE1P281MB2465.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:69::6) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8792.34; Tue, 3 Jun 2025 14:47:36 +0000 Received: from BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM ([fe80::9ab0:1ca2:379f:bde9]) by BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM ([fe80::9ab0:1ca2:379f:bde9%5]) with mapi id 15.20.8792.033; Tue, 3 Jun 2025 14:47:36 +0000 From: Ralf Glaser To: ptxdist@pengutronix.de Date: Tue, 3 Jun 2025 16:45:01 +0200 Message-ID: <20250603144728.30208-1-glaser@iotmaxx.de> X-Mailer: git-send-email 2.49.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: FR2P281CA0148.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:98::6) To BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:64::12) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: BEZP281MB3361:EE_|BE1P281MB2465:EE_ X-MS-Office365-Filtering-Correlation-Id: 5ec99e9e-af4e-4017-cdbc-08dda2ad94b3 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|376014|366016; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?etA8dZafYuBqF1lX0iEfaNWBVzWc172/PPVqkD+Wky1Sf07FACYAmh8p+cGc?= =?us-ascii?Q?MDj/erbPXmX4uvmCHIiQENBPTf+La/NcLpN+G0qj2ecHEYU/YJWs/ustyo/h?= =?us-ascii?Q?lyCSsYOfMhvlIYrrA6t/DO0QruRlb7aA3kVZMG8fdXnZgzAkDuNjK1jS2dA5?= =?us-ascii?Q?XARrDYeOIBnAznE5c7VYeg09SsfLnDjlmCUFhy1XMZvw7dk+L80qGq+LXkUR?= =?us-ascii?Q?w29vviyL90RVJuElfF9yVy8dw4MzkjcLFLPjOWPCPVSdGFVUC4c3trhw+rYL?= =?us-ascii?Q?dUI+YHWGC27cfaBO9JghP5Gatl4Sa0s06kihJLk8ogBJT/tRVaNzFb2/XIOD?= =?us-ascii?Q?oTsapQzRU5KrTEyVP4rUIk9k1qM4Qmd776vRAf4hhNTKKZW591XdGv7UBf9U?= =?us-ascii?Q?wBWLlU2lyKNpHn/209uPJRNXl5OxxSPSGZvdxxI3z0f3Ilg/X5PDbaWss3ES?= =?us-ascii?Q?f+DwZVtI3FeO6xl4RfA5n30/3KiA4L7IB5VUR02EAmB/lpLtu2Bcm0PGbV70?= =?us-ascii?Q?7aFKDMcnzH9/LRjhwveqjRdJdbt+VBOEHjBxeKRV4fqSjCOTFQoDdZya6+nE?= =?us-ascii?Q?gidvHKJnHkh8u5mNgUtxsI7PMS9qATAjZi3Ju+DlH7ybthAovKKXbj7KjIHU?= =?us-ascii?Q?aYelxCDT4NXv34Bh3We9ZscIONznhBOTnvdzO5MhVwEJ7m5an0PZIYuG0uJK?= =?us-ascii?Q?5RVmkcqXSZ+OHBbSQortGpNRrbrMM+gLGiDjpluYfAa4R0ocvGHzv9SQUGUA?= =?us-ascii?Q?no+/cIhw8aovvvxXicQeT1DkpNA5JBMQKW44PwQIHKGhgIMiQ05HA4pO+Rlo?= =?us-ascii?Q?eFTd1IpeDC35nMhMzgHqXNimIXswRblcNSGwOf0rhSFwO+AFSqKe8swMcXHJ?= =?us-ascii?Q?ZHYyfqdCIk4tvOlvxLpf3J8ecJBNyx0ugxlH8+4qqQQjC6IGvDBVzy+tOWHo?= =?us-ascii?Q?cv6ipCjGaCR2dKVdRyuWxd22yiASvlH3AqJ8ce8GaJJcu9j/N294aCPGBi2S?= =?us-ascii?Q?ChTVcGTBBpj4k+LTFBnMk9ZuIW5j1Wiz535a/jCN5ebWneWdZyAvYpkVtWXr?= =?us-ascii?Q?ZW/rirWNQSpTRf2isvCWbEiuhOguG+/m3YWEDcHcEOV71HjDghD9SYDdjBKK?= =?us-ascii?Q?B11NODWdTH2M31gnkWAPP7AW9v8m/yMZPtrZg2SpMSWAyQpbAe96cRgQ62hU?= =?us-ascii?Q?sCN1c5qU24/1XmDH2SZx+lcgTvya++WDZFdeLWbSzjqYifgAPt7yWHXm+mPk?= =?us-ascii?Q?iaDgt43sFUB/XmZ64jF0MZ+8usktsyinSg9bhuMADHKoPuVRtNDffIDaCm/2?= =?us-ascii?Q?KIuX65L60f8Dt98gcVwytur0ON2iGTomrCbZk5Od3I5kWhjFe4ypl0JE5OSE?= =?us-ascii?Q?jCImKok=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(376014)(366016); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?JIO4W4RRGCHfGybLopM61J6R3oay4gr6MkvkLgPncOt40aQuBQN4x7xbhPDS?= =?us-ascii?Q?MQ6TVQSlvMxvxos7ol9qQVIIMWvhGazBz92c8lis+VITtyDM7KFN4f8wd10m?= =?us-ascii?Q?1fGMAnbThUtALnxVHTxxk369PBMANNXbZs3Sp4gztSas6BQ09lz/sfYB/4OE?= =?us-ascii?Q?Yz7g2YzXFvN6Gsz3UrQkv2ZRY5SXjHrNx77cP2x2GnWF2JPqhjNcRoAQvrRc?= =?us-ascii?Q?xK4b+iIbJ04u6ZXRSjxbvGkUv20Qk5Ea/AuZXa2PF/NqXN6y2aCrFm5WBb+j?= =?us-ascii?Q?HBZsdHNTE+kqKcAeNID4spZ+8zUCPliurfCxUiQNTC9fMwVSPsgYXjNGbZp2?= =?us-ascii?Q?JnA7aShfjm+lu+ENtAzl20LJ4ILreymq56Yvl4NxX41YC0/TK3lQDtM2jYil?= =?us-ascii?Q?FjBJw7eTux57HtVroMuWXWwOB9swPwWalMbgXDNnENeSvb0zC43m4s0YSTGj?= =?us-ascii?Q?NOuCLFe0iXZSBom4YpeP1D8Slcd7FKLGsLeGlHYL4YKe7Go2BxvB8AQpjXEA?= =?us-ascii?Q?EuIULiRMDCJ5xUkQKocz4JUlKqQpiMH3m1sOGMfjZRAeslgBPN5Sjcruxmex?= =?us-ascii?Q?09p1BgqJGVW+4D06mQKRVvW3Z2nhoYhuz6Ao3C8aLn0fyMJhplNAZ2YOfphY?= =?us-ascii?Q?N0GCiCN43NudhtmJxN3E+1d3yhe+KQbP73hFpev0AyveNV1JvDkAf8yqHlWP?= =?us-ascii?Q?9JfamsowRJr+nh+iuchhbQMmXusc4i3L+mZ7gOnq6v0LWU9FSaX6y1pqf+7t?= =?us-ascii?Q?fdDCruAUsz46B640d3i8T4xPc5UfEerhp6K7BGs6bG5rxyxhi9MGxxm7hOPz?= =?us-ascii?Q?pyPr7XVvP1ZH3Mx7tiS+ntFNdpy3Z4JbNNh9yiAoV4f5rYyzdyoWUr+ewSOU?= =?us-ascii?Q?LAS/Opd/rhuNFXefz3qYBhUVv4H3BEbKZY/9N7djfaClhgfsrOeW9Nn88w61?= =?us-ascii?Q?+TYMajqsfm1wSJD6t8XT55xHYgyqF+yA9D+w+UejJNdnGaUNzGqwNmyCy9sq?= =?us-ascii?Q?5aRaI5ificsFFVGHRCimPMyr8fqGfePTueIAy12JeNDr/x+7S1IgHCrnG/xb?= =?us-ascii?Q?CD2iibNSZuM+DFMEGvlQeI9O/8D/LvuNrEadS7wfddNJaD+GyboJ1b2G3lVG?= =?us-ascii?Q?OXERSN8AhK3XS+EPiSWNtWiBZLBpPrp0OXFBdbvkdGvkuEFtxz/c2kgpdeWp?= =?us-ascii?Q?g2MlZstBBnUCjcZ+sakCleDznKFcvSdIfQVIUptJgjsXqgoS5kMVSWYudbZI?= =?us-ascii?Q?hNJnf8VWHbNAcjtP72p715yGPIzxZ4TZbYh1F/idd0BrFQAD3LpnyMQj4eHm?= =?us-ascii?Q?sdUWKGKKbci40gru9zDm1JO6uZ7yxqfZTQTIRzGngb8D4iisGzGxvcYfHBX4?= =?us-ascii?Q?Yr6VMbTB8PrIW/fg1EaqkoxcbrOigKkuPuLqfTHh5qBv8xcncj0Ih/T7hvSw?= =?us-ascii?Q?BF89ylwmvilD7H/Xw28ct286VfcxUDutMNMeWKHLDcFWIM6E6GQ/rXZLydlG?= =?us-ascii?Q?boqX/J/ZBZqyl+RRKSPzTX8KUlt1Hy/rvh81dIwkE20wIXvO1SLdtBiSr/Jy?= =?us-ascii?Q?uTu31lzpAmSySMPZeimfrbWugiidBf6nS9e+TV/E?= X-OriginatorOrg: iotmaxx.de X-MS-Exchange-CrossTenant-Network-Message-Id: 5ec99e9e-af4e-4017-cdbc-08dda2ad94b3 X-MS-Exchange-CrossTenant-AuthSource: BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 03 Jun 2025 14:47:36.6556 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: a87713f9-2dd4-4b97-bace-ad3bca53b833 X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: fPgsP7V2BcwyW2Qdz+KskoB7lCB7g5qbKZIzatmI3289NRijKqAwEirZO99KzvcKbQy2KWWArZ7UuJDn/9PVXA== X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE1P281MB2465 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-101.9 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_PASS,SPF_PASS,USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] spdx_sbom.py: correct creationInfo X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: Ralf Glaser Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Use a timezone aware datetime object and correct "creators" information as otherwise https://tools.spdx.org/app/validate/ will not recognize the SPDX-SBOM as valid. Signed-off-by: Ralf Glaser --- scripts/report/spdx_sbom.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/scripts/report/spdx_sbom.py b/scripts/report/spdx_sbom.py index 124e75614..1e3a36665 100644 --- a/scripts/report/spdx_sbom.py +++ b/scripts/report/spdx_sbom.py @@ -6,7 +6,7 @@ # see the README file. # -from datetime import datetime +from datetime import datetime, timezone from os import path from shutil import copy import hashlib @@ -142,8 +142,8 @@ class SpdxSbomGenerator(SbomGenerator): def build(self, data): creationInfo = spdx.SPDXCreationInfo() - creationInfo.created = datetime.now().isoformat() - creationInfo.creators = [data['bsp']['vendor']] + creationInfo.created = datetime.now(timezone.utc).replace(microsecond=0).isoformat() + creationInfo.creators = [ f"Organization: {data['bsp']['vendor']}", f"Tool: ptxdist-{data['ptxdist']['version']}" ] document = spdx.SPDXDocument() document.creationInfo = creationInfo document.name = data['bsp']['project'] -- 2.49.0