Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Include the OS Information available in the SBOM model in the SPDX reports #3462

Open
wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Include the OS Information available in the SBOM model in the SPDX reports #3462

wants to merge 3 commits into from

Commits on Nov 25, 2024

  1. Include the current linux distribution in the SPDX report as a package 

    Add a new package reference describing the linux environment available
via `SBOM.Artifacts.LinuxDistribution`

When it's not found, it behaves as before this PR.

When found it'll interject the `OperatingSystem` reference between the
target and the packages to reflect:

Document DESCRIBES target
target CONTAINS OperatingSystem
OperatingSystem CONTAINS *Packages

Signed-off-by: Jose D. Gomez R <[email protected]>
    @josegomezr
    josegomezr committed Nov 25, 2024
    Configuration menu
    Copy the full SHA
    d6047e5 View commit details
    Browse the repository at this point in the history

  2. Adjust specs to include the Operating System in the report 

    Signed-off-by: Jose D. Gomez R <[email protected]>
    @josegomezr
    josegomezr committed Nov 25, 2024
    Configuration menu
    Copy the full SHA
    5db18bb View commit details
    Browse the repository at this point in the history

  3. Use distro ID as package name and string representation as description 

    Signed-off-by: Jose D. Gomez R <[email protected]>
    @josegomezr
    josegomezr committed Nov 25, 2024
    Configuration menu
    Copy the full SHA
    8dcd37c View commit details
    Browse the repository at this point in the history