Page MenuHomeFreeBSD

Add sbom target to Makefile and needed Lua scripts
Needs ReviewPublic

Authored by tuukka.pasanen_ilmi.fi on Fri, Oct 24, 10:44 AM.
Tags
None
Referenced Files
F133762598: D53318.id164949.diff
Tue, Oct 28, 5:22 AM
F133762561: D53318.id.diff
Tue, Oct 28, 5:22 AM
F133762470: D53318.diff
Tue, Oct 28, 5:22 AM
Unknown Object (File)
Sun, Oct 26, 11:14 PM
Unknown Object (File)
Sun, Oct 26, 11:14 PM
Unknown Object (File)
Sun, Oct 26, 5:49 PM
Unknown Object (File)
Sat, Oct 25, 5:50 PM
Unknown Object (File)
Fri, Oct 24, 8:31 PM
Subscribers

Details

Reviewers
bapt
Group Reviewers
portmgr
Summary

Add sbom target to Mk/bsd.port.mk and needed Lua scripts

  • Mk/LuaScripts/ports-spdx.lua: SPDX Lite 3.0.1 creating functions library
  • Mk/LuaScripts/ports-spdx-traverse-deps.lua: Creates SPDX SBOM from packages and traverse thru depended packages and adding their information also
Test Plan

Apply diff and then go to some (first some package with few dependencies) and run make sbom. After a while it should output SPDX Lite 3.x JSON-LD SBOM for that specific package and include package dependencies and information.

Beware: Currently it does not use SPDX License string but licenses from FreeBSD ports. This is know issue and will be fixed in future.

Diff Detail

Repository
R11 FreeBSD ports repository
Lint
Lint Skipped
Unit
Tests Skipped