Re: [ptxdist] [APPLIED] spdx_sbom.py: correct creationInfo

[Michael Olbrich <m.olbrich@pengutronix.de>]

Thanks, applied as 6c38ae66ad0c29ca95841f912c1d851e941d396d.

Michael

[sent from post-receive hook]

On Mon, 30 Jun 2025 18:14:41 +0200, Ralf Glaser <glaser@iotmaxx.de> wrote:
> Use a timezone aware datetime object and correct "creators" information
> as otherwise https://tools.spdx.org/app/validate/ will not recognize
> the SPDX-SBOM as valid.
> 
> Signed-off-by: Ralf Glaser <glaser@iotmaxx.de>
> Message-Id: <20250603144728.30208-1-glaser@iotmaxx.de>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/scripts/report/spdx_sbom.py b/scripts/report/spdx_sbom.py
> index 124e756142d0..1e3a366659d6 100644
> --- a/scripts/report/spdx_sbom.py
> +++ b/scripts/report/spdx_sbom.py
> @@ -6,7 +6,7 @@
>  # see the README file.
>  #
>  
> -from datetime import datetime
> +from datetime import datetime, timezone
>  from os import path
>  from shutil import copy
>  import hashlib
> @@ -142,8 +142,8 @@ class SpdxSbomGenerator(SbomGenerator):
>  
>      def build(self, data):
>          creationInfo = spdx.SPDXCreationInfo()
> -        creationInfo.created = datetime.now().isoformat()
> -        creationInfo.creators = [data['bsp']['vendor']]
> +        creationInfo.created = datetime.now(timezone.utc).replace(microsecond=0).isoformat()
> +        creationInfo.creators = [ f"Organization: {data['bsp']['vendor']}", f"Tool: ptxdist-{data['ptxdist']['version']}" ]
>          document = spdx.SPDXDocument()
>          document.creationInfo = creationInfo
>          document.name = data['bsp']['project']