Re: [ptxdist] SBOM / manifest

[Christian Melki <christian.melki@t2data.com>]

On 10/5/21 15:58, Alexander Dahl wrote:
> Hei hei,
> 
> On Tue, Oct 05, 2021 at 09:38:55AM -0400, Akshay Bhat wrote:
>> Is there a way of generating a SBOM (Software Bill of Materials) i.e.
>> list all the software packages installed on the target with the
>> associated version and license info for a ptx-dist? Something similar
>> 'make legal-info' in buildroot.
> 
> You can generate a license report like this:
> 
>   ptxdist make license-report
> 
> You'll find the report in platform-foo/report as .pdf afterwards.
> 
>> The closest I could find was:
>> ptxdist list-packages | xargs ptxdist package-info | grep -e package:
>> -e version: -e license:
>>
>> Also are there any plans in the roadmap for supporting a SPDX SBOM?

I'd second an implementation of a SPDX export of package usage, licence,
patch modifications and link dependencies.

It's much more usable with something like SPDX instead of a pdf.

> 
> Not sure. But the documentation has some hints: 
> 
> https://www.ptxdist.org/doc/dev_licenses.html
> 
> HTH & Greets
> Alex
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
> 


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de