From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 05 Oct 2021 15:40:09 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXkfx-00060E-D3 for lore@lore.pengutronix.de; Tue, 05 Oct 2021 15:40:09 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1mXkfx-0002E9-0F; Tue, 05 Oct 2021 15:40:09 +0200 Received: from mail-lf1-x135.google.com ([2a00:1450:4864:20::135]) by metis.ext.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.92) (envelope-from ) id 1mXkfN-0002E0-LQ for ptxdist@pengutronix.de; Tue, 05 Oct 2021 15:39:34 +0200 Received: by mail-lf1-x135.google.com with SMTP id n8so30232801lfk.6 for ; Tue, 05 Oct 2021 06:39:33 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=timesys-com.20210112.gappssmtp.com; s=20210112; h=mime-version:from:date:message-id:subject:to; bh=VnBqeCj8wln8IdtVs1f3JKFAyz1cXwV+hiq2vfNeA1c=; b=IwlziWlil8VXf67hxB/N7LeHhi4EcM/5+cAuvRfUgkfNKd9ZBvwWRy7izWH1PIMRDh 15iQoPIcNcL6nu21+VhjVpoxONhYLk1kAIOgfDPcyqHaku7gJFSRCL21T3TCI3SuOS6O zj569Z+NvKc7lfIT86DaTSWLS2X5phr35s9/sFo+zyK02PEPMtOe/rQ70RGMuVlMrO1P FcYibWDUBaMWli2/fYKJAhaV0cEvMPyO6YaTMXcNqr0Nmkc6FvpoDdV5y4CLCHmIjtfl rhbnUho3vOcPYZQNYzqpYjxcEXZ78pxyPdhOSuuAy/AuOlh9PWn4HRKnmz3/8g5MU73j RXsQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:from:date:message-id:subject:to; bh=VnBqeCj8wln8IdtVs1f3JKFAyz1cXwV+hiq2vfNeA1c=; b=y75teolBVD9N1tVHhbyhINvtDLvXrObI3+pCKzNuYWPS1HE5wgExQ/UHJJ2DLJml1o q7nN9Sq8JddJPEKILq3nlgTtzZmY2IYgfTPN5WDEo6eM/5YIwVoOCkPr+K7XUeaQk5d6 L/bqFFNVCu1teyQ0rQQvLLEj86ylxYhj1cXm9gcO8DkNJC4FJQjT8kXycp4s32yTybFg g1gGP+6b79YXZ5a+7VRak0J+PubESoHsicRaTHxofObM1oNAvRXsHLvCORUqxX/Tb0yY Pwq/NM0WAmZOV+7tg9H+GRNxlxbAzKH+G+Zlf/uLvyDP9RwLrYrXF4WCI0qMO5qA4N4J yvMQ== X-Gm-Message-State: AOAM532I5LY64/4MrM9w6f+tM+HjkjHaJ/0aS/A/xqafYlCpCQuPB7oa mDdTpseKOjcxoTtHY694jiDs70QXVh+NboIj/h9h5BZI8oagvw== X-Google-Smtp-Source: ABdhPJwyy4NUCZ7TMaJgyh13N2Zhl+xfG3dKOAXZXov2H1zYhESzc+a8xfB53OztLs8TzXk2Z1ENrytP4G1FUoefRPw= X-Received: by 2002:ac2:4c51:: with SMTP id o17mr3531562lfk.457.1633441171020; Tue, 05 Oct 2021 06:39:31 -0700 (PDT) MIME-Version: 1.0 From: Akshay Bhat Date: Tue, 5 Oct 2021 09:38:55 -0400 Message-ID: To: ptxdist@pengutronix.de X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-1.2 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,SPF_HELO_NONE,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] SBOM / manifest X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Hi, Is there a way of generating a SBOM (Software Bill of Materials) i.e. list all the software packages installed on the target with the associated version and license info for a ptx-dist? Something similar 'make legal-info' in buildroot. The closest I could find was: ptxdist list-packages | xargs ptxdist package-info | grep -e package: -e version: -e license: Also are there any plans in the roadmap for supporting a SPDX SBOM? Thanks, Akshay _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de