mailarchive of the ptxdist mailing list
 help / color / mirror / Atom feed
* [ptxdist] CRA and SBOM
@ 2025-04-25 13:09 Ralf Glaser
  2025-04-26 10:27 ` Michael Olbrich
  0 siblings, 1 reply; 3+ messages in thread
From: Ralf Glaser @ 2025-04-25 13:09 UTC (permalink / raw)
  To: ptxdist

Hi @all,

will there be any support for SBOM generation in ptxdist (as we are all required by the CRA to provide this)?

Best regards,
Ralf




^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [ptxdist] CRA and SBOM
  2025-04-25 13:09 [ptxdist] CRA and SBOM Ralf Glaser
@ 2025-04-26 10:27 ` Michael Olbrich
       [not found]   ` <BEZP281MB336182C51FD06106E8E2F560A5812@BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM>
  0 siblings, 1 reply; 3+ messages in thread
From: Michael Olbrich @ 2025-04-26 10:27 UTC (permalink / raw)
  To: Ralf Glaser; +Cc: ptxdist

On Fri, Apr 25, 2025 at 01:09:52PM +0000, Ralf Glaser wrote:
> will there be any support for SBOM generation in ptxdist (as we are all
> required by the CRA to provide this)?

PTXdist has support to generate SBoMs. It's just not really documented.

Set PROJECT_DEFAULT_REPORTS to "spdx-sbom" and either enable
PROJECT_GENERATE_REPORTS to generate the SBoM when images are built or run
"ptxdist make image-reports" to generate them manually.

Michael

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |



^ permalink raw reply	[flat|nested] 3+ messages in thread

* Re: [ptxdist] CRA and SBOM
       [not found]   ` <BEZP281MB336182C51FD06106E8E2F560A5812@BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM>
@ 2025-04-29  4:46     ` Thorsten Scherer
  0 siblings, 0 replies; 3+ messages in thread
From: Thorsten Scherer @ 2025-04-29  4:46 UTC (permalink / raw)
  To: Ralf Glaser; +Cc: ptxdist

Under 'Project Configuration' in ptxdist menuconfig.  Availible since
ptxdist-2025.02.0 .

LG
Thorsten

On Mon, Apr 28, 2025 at 02:03:28PM +0000, Ralf Glaser wrote:
> That sounds great, but where do I set PROJECT_DEFAULT_REPORTS?
> 
> Ralf
> 
> ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
> Von: Michael Olbrich <m.olbrich@pengutronix.de>
> Gesendet: Samstag, 26. April 2025 12:27
> An: Ralf Glaser <glaser@iotmaxx.de>
> Cc: ptxdist@pengutronix.de <ptxdist@pengutronix.de>
> Betreff: Re: [ptxdist] CRA and SBOM
>  
> On Fri, Apr 25, 2025 at 01:09:52PM +0000, Ralf Glaser wrote:
> > will there be any support for SBOM generation in ptxdist (as we are all
> > required by the CRA to provide this)?
> 
> PTXdist has support to generate SBoMs. It's just not really documented.
> 
> Set PROJECT_DEFAULT_REPORTS to "spdx-sbom" and either enable
> PROJECT_GENERATE_REPORTS to generate the SBoM when images are built or run
> "ptxdist make image-reports" to generate them manually.
> 
> Michael
> 
> --
> Pengutronix e.K.                           |                             |
> Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
> 31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
> Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |



^ permalink raw reply	[flat|nested] 3+ messages in thread

end of thread, other threads:[~2025-04-29  4:47 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2025-04-25 13:09 [ptxdist] CRA and SBOM Ralf Glaser
2025-04-26 10:27 ` Michael Olbrich
     [not found]   ` <BEZP281MB336182C51FD06106E8E2F560A5812@BEZP281MB3361.DEUP281.PROD.OUTLOOK.COM>
2025-04-29  4:46     ` Thorsten Scherer

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox