From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 29 Apr 2025 06:47:10 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1u9cs9-000OEG-2R for lore@lore.pengutronix.de; Tue, 29 Apr 2025 06:47:09 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1u9cs9-0003ci-Cp; Tue, 29 Apr 2025 06:47:09 +0200 Received: from mail-germanywestcentralazon11022125.outbound.protection.outlook.com ([40.107.149.125] helo=FR4P281CU032.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1u9crs-0003cZ-83 for ptxdist@pengutronix.de; Tue, 29 Apr 2025 06:46:52 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=mdoybcbba2M48gr8I9yd2xFNJP9RWwpe/t6rzI3hLMwADstYQQ1fGLnWcRs3qQu1AgNx7X85ekP19OngjJj4v3WHvVY1pH3KCu5SQa5gmy9OB+irEnDmeaFSyjfqf9B1En7zadjeDLVl0N/as+sAKuBmh9ON9RerT6neiCr5Go5O6b3Hl4uUASN4sTaPDNwv/BBnj2D/TIvfReBpoDp9DC9T3NxHpSm476iNc+csMmIIYEningGRj6BG9cQ7eiuHDv8XTXCLfCbrCO7L9EeGcRLyfsXdvT7MoD4e+JmIaKJ8YnMeAU4aQzbnR92Re8k50HxpYN1lh2Kz9U/KCDvzZg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=pfSLYVNq6+e6iOrhYwxt4oAUNVDgDuj/rebIQ2SUm9E=; b=JD2FwHqwSo+dDcWq/aRp1rTkG+R8A+V7+4Zx9ke+JFnB3zzjec6clOwEduu6Bpsjn6odQ4YNHlweCxmkRK2iPTvNS4/qBgq1aUqrkfcw5Md2qy7hNYxl8iOLleuM8HCZd38F14kAnE5VJ4m1UZkiith0kOI332mmbmmjM7jnSDxUhOLoOx57Ktn1dO8moAucMtYLB2jiBw/kShXvmSEbZ8MEVlMOSdKHIHZJSwc417MxujB5CL5VjqLWZ7mj2bAiX7eYFkvy4HNYTkgfEtfuDC6jZlqy+5W+8u2lcJRBH6iIlxm/rRdwZavVGtcHHh1wLvYO5itBQ1IG4LwKEgoJYg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=eckelmann.de; dmarc=pass action=none header.from=eckelmann.de; dkim=pass header.d=eckelmann.de; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=eckelmann.de; s=selector1; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=pfSLYVNq6+e6iOrhYwxt4oAUNVDgDuj/rebIQ2SUm9E=; b=Sqo0sSDLr23YGti//aezrQxuRJcpLYm69TEH08FQfA1quQsv+Jv5uhFa7bfxB/875m5HcsXdlETSWXIWKB241ZzH7keD0Dg0cjYWYuqXSIYTDs4hj6nSka2uHBQUZMk1jCVH9lcyVBpYuIqkoy6SW6KK9c7ItYGA6C/ko3CeHpU= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=eckelmann.de; Received: from FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:da::13) by FR3P281MB3053.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:58::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8699.19; Tue, 29 Apr 2025 04:46:50 +0000 Received: from FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM ([fe80::3927:fe99:bb4:1aa7]) by FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM ([fe80::3927:fe99:bb4:1aa7%4]) with mapi id 15.20.8678.033; Tue, 29 Apr 2025 04:46:50 +0000 Date: Tue, 29 Apr 2025 06:46:43 +0200 From: Thorsten Scherer To: Ralf Glaser Message-ID: References: Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable In-Reply-To: X-ClientProxiedBy: FR0P281CA0054.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:48::16) To FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:da::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: FR4P281MB3510:EE_|FR3P281MB3053:EE_ X-MS-Office365-Filtering-Correlation-Id: 24d43f8c-9df4-457f-d2ec-08dd86d8dae0 X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|1800799024|366016|10070799003|376014|7053199007; X-Microsoft-Antispam-Message-Info: =?utf-8?B?bCtpZnJLUmpYT0lHa0tmTnA0R1h3anRrSTUzY09OdmZBSlRZYU9KY3JTVEdL?= =?utf-8?B?SE1OQ1BrY082am5pUWhHeE5xTnkwMnJhZXJMY3BRRzF0Um1mdncxR2M4Mkw4?= =?utf-8?B?R3FmdFh0UGdWc2FxWU9iZ3VFOGRIWG1rVGZQRWJlOFlVQndJK1ZKYWxGS2t2?= =?utf-8?B?UzZIZWtvajVZV2dKc2lCT3FwdCs4d0JhV0UycWw1azlhaUdHUTI4MVZpbTdM?= =?utf-8?B?dnEwcmEyeGlwam5UazI3bC9EYVZaTk13NlJmNnkyeDhSZEhsZGVpZnFBUFA0?= =?utf-8?B?ZlEyU2hzVys0RHBJS3I5SHpNUzJoeHMzTjFZVWF4cnp3REhRMGpCUTNVNjJY?= =?utf-8?B?dzdnbjZmSVNMMzBQcTBKVURyRUlKQkdDN2IzSjE5L1NiNkFQeEd0Rk5SWDg3?= =?utf-8?B?R3lTTU5wckdZUXpkUWh1YVZUWkcvOVdwc0FYREZUVFFJTFNQb3BlRi9ub0xL?= =?utf-8?B?ejQxb245Z3ZFSXo4OE5XSWxmS0E0aFN6RmN5cmMyemdLdS94YWdINUJNaXlu?= =?utf-8?B?MFNtbFE3SDlLZGdDVUFhTGltT3lKd2tJaGlUVmQwSHVXMTNvNUVibGllZlpG?= =?utf-8?B?ZGZNTHU4eGF4Q2w4b1ZJVkJJUi8wNWpMUVJxMHhCSGFxRHhsZ0VKeU1MdGd4?= =?utf-8?B?L0FCU1h2RVl6OVE0RmpQSVBnU29LMDdnY01VMFVpczludWhPbGY5NUFhV2VZ?= =?utf-8?B?TkZPMDlIK1luRmxWaVNLT3kzVEVpR1BNa0ZUQWtMTktCdk05WTcwV0dHc1VF?= =?utf-8?B?ZG56cEtjcnBNN09VTkZFR2pveFBjaXA3VGk2Ry9uUVFKSDB1V0NMZWZSWG1C?= =?utf-8?B?VnJJcUxGRTJVL2xvYUgySlY5WXRNd0o2TWhBVUowN3ZvYStkcllRSWJzUG1x?= =?utf-8?B?TXVrUzg0c0tCTzdJYS9KNlhSSUk2SmVvaDNBT2R3OEQ0bGVGYkd3QWFZNHVh?= =?utf-8?B?RUc5SFYvVzRmV1hnb0FoMDVNNGs5aURRcFlVTnVmK0FaQkRkVVlhYzRYU3Az?= =?utf-8?B?Um9WQ0c3SEtTSjFUWDBNbzFNUWJpUXRnbHpsc0J0YmVuTE5aS0oxcEtlbzhp?= =?utf-8?B?eFB3dVpWbWYvakgvazVUUkZxck5MMlZuc1R5TnFPZ3gwSW43d0VoTXlsMlpI?= =?utf-8?B?S3ZKQzVVclpaVTJnMmYrQlRuT2pXc0wvcHdKME8zSUlyVHJ6WXU0YkMyTWhS?= =?utf-8?B?OGgxMThaQ2xzZXhTcnNieXorc05RWDZaM3Ayc21DckR5bGJKRVM1QnM3ZmNE?= =?utf-8?B?ejc3MUFxOW5VYysrKzVmRzBFQldneTlhWW1wZ1Uvdys0Q1ZrQVhzN1dlOTNz?= =?utf-8?B?QWRCSVFBRHRtR2xrS3pzcXZwa2lLT2thUW1uVmRMRW9yaTR4dTZJc3hNMXY0?= =?utf-8?B?bXNHS01Dbk4vNE12aExOaEFLRHYrclRtcG1NckxkQjJJLzJpYWRLSE4ya0lt?= =?utf-8?B?dVBxOE1lS1g5RHl6Nk1PeDNrMVZDNS9HeXhqMUVvU0JMd1k4dTJJWS9BcDhv?= =?utf-8?B?Y2FXS2pqQ3pzZThSL0k4OWxmQWtiYmtWdjI5RVl5MUI5R2ZvL1NFY1hFdUtJ?= =?utf-8?B?SWhQMDg1VTllanNNRGptKzNuckx0VU5MdmRITFZHaktoMWI5NnFPSGgzYVdz?= =?utf-8?B?RTNxRXRZY05VR0d5UmpNd0EvZDQrOE1PaUkvQlc1UTdyM0VlUk1FWkZ3N3Fz?= =?utf-8?B?cmxWRE45dDg5NFN1aHdrSzNqdUZyRHVERlk0bXhyYWlKbFVGbmVDaWZRekVD?= =?utf-8?B?czJHb1VsRTFkc1FQRlpHTTVrSC9jeEViQzR6UjdYVXBZYXVvR1hlM0o1YnRH?= =?utf-8?Q?nFBCvuDrt7KN7jpsxMM3CuhlGx/X+JLUqwnbc=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(1800799024)(366016)(10070799003)(376014)(7053199007); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?utf-8?B?cHZNQjBPV2RDajhuMFhQVUN2Y3VwdENlN3Y0TzhkTDFoZTgvQTNBeDBTb0l3?= =?utf-8?B?bzlhOTkyQXdmV3hqUEswSXBQUk5kN0FVVnhzTGtFWnUvVTdJT0hsUEVoeitp?= =?utf-8?B?RzNQYS9rT1g4dTg5SWJJaEVLOHprU0Y0VnZpNmhVQ1U1QWs0SnJ6dkRiejh2?= =?utf-8?B?ckJoUXFRL0pTaGk2VXFuUkhFWFhraWQ5c09UeWo0RGdpK3RXZkJyYk1CWTZ3?= =?utf-8?B?VHZXbHBpUnpVd2JkbDRDcGNwZ1V0L1l2ZlNjTVhpM2VqdTZCMU45eFA0Qlgx?= =?utf-8?B?NVZyY3dza1ZRUjNUb0RIWDFsOVJRTXhFcXVvc3RlSzZBYXFUSDdaUWQ2Y0dC?= =?utf-8?B?WlBvTndPOEViYlFVT2xsT1BKOFduKzk4UHluT0hRc0NzMVdXODRzYWpORElJ?= =?utf-8?B?bHY3bjJDL04wTDUxTUZIRVFnV24xdXVubHB0aTE1KzFycXlJMDZzc0hqZGdC?= =?utf-8?B?Y1VUWjlFck9QcWpKeVY3TGFMMWJ2MUZDMGEramRCMWt4eHphNFJnOGZmRGtT?= =?utf-8?B?Nm42K1E5MUNaMWhjcU9SR21RS0cvQ2tWcGZhUzNsOEx2VnVFUXRveEJpdTBp?= =?utf-8?B?bEN4c3RhckVGcGtDUm1VR3V6dFp4Wmd4RVkzMERGR1MwSU5UWWp6c21Lc2dt?= =?utf-8?B?dVJsQ3hrVis5RmxzTkNCeWNKNHFpdklWa3hZK29JV1o5Um1qeHhDczZiN1A0?= =?utf-8?B?SDc2OUd1dkRtU0Z3UXdHaWdqVkFzeE1uWFVDdWkrSnJUNDd3VWRncVpwT2xw?= =?utf-8?B?NENzQ0Q1STl4eEtyUHdBSWQrVERvTWtNSUYrSGhYOHlQcStNZDdQNzJxSDhE?= =?utf-8?B?ZHRJSXZQa2VRdzdkbGFtcnJJaTlvRThUS1dqOGJzbWFzMytGVVNSQ2MzNFJ3?= =?utf-8?B?c0gwSkZzQmhSeG9yd0ppQUg1b1RRM2RrUnF2T0RyQjhsQUlQSEVLZnM3SEd0?= =?utf-8?B?MEVmc25wdlp2QTR4azRXKzJ3R2R0eVkvb1JmcEhPR05OMVNFUWgvSFN4RWJD?= =?utf-8?B?NnREd09pT2JWcjZKbkpBdUtiMjdHNDhvd21hL0dmZlphWS9UcmVNZ0dqUENv?= =?utf-8?B?RWJYUXlLeHF5bVRuVUluQncvd3dQT2lrS0xNRS9MZWpGT2l0ZEtORkpJYmNx?= =?utf-8?B?MjZwdTljUUxTTklNQUdjR0o5NFdBeGIwdHozMDl6V2JlV1R4VndHaGxmMGdX?= =?utf-8?B?RnJQWlpqY3AwcE8wUUNuRWhmcXR2L1VyaTFDbzV6Wnl3WmM3dE9peFAram8y?= =?utf-8?B?YnphdEtBNmxVNWJhbFhxS2FnOGdJYmRuc1FpT2xoZ0tabzJhRXEyTTdTcTNn?= =?utf-8?B?M2hJa2xVYVNKZVovc2tUYzR0aWtXZWs1dHlMcllBZjBhNG5kSW5tOFlGdUZh?= =?utf-8?B?Sm83TWQ0RnJyd083b2ZXbTRqNUNOSzc2UXIyL3VRVTREeVpvRkZleGxSZTFi?= =?utf-8?B?TkkzOW9VMTJlamh3L0I1c3RmYmxyUDN2ZkFJSjhwMGNMWjRidklFTllSdDAx?= =?utf-8?B?UkdRYU0yakY5V2t4SmxHNncwck1ud0RGN1RmbGNMWHRodkliTDN5Vm0xL2RG?= =?utf-8?B?LzNCU1BoNnVwU1NJUzVaUXNNKy9qblFIRjRlSnAwd0kvR3M1VWV1VXpVUFND?= =?utf-8?B?VUhWZWF4K3ZFQXNiSlZucGNWbDlsOHJiZkN1YndQY1gxc2ViNTZmKy8xRWU3?= =?utf-8?B?KzhSOFBpT3MyVmc2TXk5UXhPbUhlOEJwTWI1cHpXRGJqcjRYUE1uOThMYzJW?= =?utf-8?B?VWdEelIvWHVwUWlkc0NydkI5U2oxRFJ1ZGtjUW9IUWRPTEswekM0WWVMbENl?= =?utf-8?B?ZkxhSHZKdUdqYnFaV2NvRWwzekxXQXVUa09tLzZoa2NVMlR4MUF0bDB1aUZn?= =?utf-8?B?cEFpdTkyREl2NFNDTWR0bWVHV0MxUCtUQkhJSGxOYkpKSzRPMUE4ZGxEaTM1?= =?utf-8?B?ejVvaGkvb2RCUm5EeU01bTlnWHdVSklCbWEyV3ZBU1VmSTlvam5kVXdpdjhO?= =?utf-8?B?ZG5VdTZQSW93REl4RTZPbDRGTCtMUXp0alQ5cURqV3ozdVFUckFXTER1eXMz?= =?utf-8?B?MGlzZm9iM1pyb3hDOUJYK0xlMXlPZzBTT3F1QWNQdkJJS0dnM1FZR01KK0pn?= =?utf-8?B?V1hkMExJeXZtY1ZyN29CTXExOGVlWG9QRDBpZ2c4REsxdkdTVGJUcy9jREoy?= =?utf-8?B?bHRpNHNjQVc1U3FOek1ZeEpKVWRqR0xyaElyYTNjbzc5NW1NTFdHc2FuaTF1?= =?utf-8?B?L1RFVlZEQ1UrUmViN3BMbWFBQnN3PT0=?= X-OriginatorOrg: eckelmann.de X-MS-Exchange-CrossTenant-Network-Message-Id: 24d43f8c-9df4-457f-d2ec-08dd86d8dae0 X-MS-Exchange-CrossTenant-AuthSource: FR4P281MB3510.DEUP281.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 29 Apr 2025 04:46:50.0706 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 62e24f58-823c-4d73-8ff2-db0a5f20156c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: f89z1LvIh3wcYprm8bste1x9oTHv+omRXJmbrWxY2iiNPGHKwwtsHvJgA0vcRTW8eyHlrbT39PuwSBPYDJArGQ== X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR3P281MB3053 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-102.4 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,RCVD_IN_DNSWL_NONE, RCVD_IN_MSPIKE_H2,RCVD_IN_VALIDITY_RPBL_BLOCKED, RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS, USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] CRA and SBOM X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Cc: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Under 'Project Configuration' in ptxdist menuconfig. Availible since ptxdist-2025.02.0 . LG Thorsten On Mon, Apr 28, 2025 at 02:03:28PM +0000, Ralf Glaser wrote: > That sounds great, but where do I set PROJECT_DEFAULT_REPORTS? >=20 > Ralf >=20 > =E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81= =E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2= =94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94= =81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81= =E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2= =94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94= =81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81= =E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2= =94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94=81=E2=94= =81=E2=94=81=E2=94=81=E2=94=81=E2=94=81 > Von: Michael Olbrich > Gesendet: Samstag, 26. April 2025 12:27 > An: Ralf Glaser > Cc: ptxdist@pengutronix.de > Betreff: Re: [ptxdist] CRA and SBOM > =20 > On Fri, Apr 25, 2025 at 01:09:52PM +0000, Ralf Glaser wrote: > > will there be any support for SBOM generation in ptxdist (as we are all > > required by the CRA to provide this)? >=20 > PTXdist has support to generate SBoMs. It's just not really documented. >=20 > Set PROJECT_DEFAULT_REPORTS to "spdx-sbom" and either enable > PROJECT_GENERATE_REPORTS to generate the SBoM when images are built or ru= n > "ptxdist make image-reports" to generate them manually. >=20 > Michael >=20 > -- > Pengutronix e.K. | = | > Steuerwalder Str. 21 | http://www.pengutronix.de/ = | > 31137 Hildesheim, Germany | Phone: +49-5121-206917-0 = | > Amtsgericht Hildesheim, HRA 2686 | Fax: +49-5121-206917-5555 = |