Page MenuHomeFreeBSD
Files F152953887

D56299.id175438.diff
No OneTemporary
Actions

D56299.id175438.diff
View Options

diff --git a/website/content/en/status/report-2026-01-2026-03/sbom.adoc b/website/content/en/status/report-2026-01-2026-03/sbom.adoc
new file mode 100644
--- /dev/null
+++ b/website/content/en/status/report-2026-01-2026-03/sbom.adoc
@@ -0,0 +1,34 @@
+=== FreeBSD Software Bill of Materials
+
+Links: +
+link:https://github.com/pkgconf/pkgconf/pull/484[spdxtool: Add parameter for using URI as SPDX id] URL: link:https://github.com/pkgconf/pkgconf/pull/484[] +
+link:https://github.com/pkgconf/pkgconf/pull/483[spdxtool: Add cli parameter for changing SPDX id] URL: link:https://github.com/pkgconf/pkgconf/pull/483[] +
+link:https://github.com/pkgconf/pkgconf/pull/475[spdxtool: spdxtool: Add homepage handling] URL: link:https://github.com/pkgconf/pkgconf/pull/475[] +
+link:https://github.com/pkgconf/pkgconf/pull/474[spdxtool: Add source handling to SBOM] URL: link:https://github.com/pkgconf/pkgconf/pull/474[] +
+link:https://github.com/pkgconf/pkgconf/pull/473[spdxtool: Add support for copyright text] URL: link:https://github.com/pkgconf/pkgconf/pull/473[] +
+link:https://github.com/pkgconf/pkgconf/pull/461[spdxtool: Rework of License-tag SDPX expression evaluation] URL: link:https://github.com/pkgconf/pkgconf/pull/461[] +
+link:https://github.com/pkgconf/pkgconf/pull/450[Add some stricter compiler warnings and overcome new warnings ] URL: link:https://github.com/pkgconf/pkgconf/pull/450[] +
+link:https://github.com/pkgconf/pkgconf/pull/447[libpkgconf/libpkgconf.h: Add printf-like attributes to functions] URL: link:https://github.com/pkgconf/pkgconf/pull/447[] +
+link:https://github.com/pkgconf/pkgconf/pull/446[spdxtool: Update variables that are const to const] URL: link:https://github.com/pkgconf/pkgconf/pull/446[] +
+link:https://github.com/pkgconf/pkgconf/pull/445[man/spdxtool.1: Add man page for spdxtool] URL: link:https://github.com/pkgconf/pkgconf/pull/445[] +
+link:https://cgit.freebsd.org/src/log/?qt=author&q=Tuukka+Pasanen[Added SPDX-License-Identifiers] URL: link:https://cgit.freebsd.org/src/log/?qt=author&q=Tuukka+Pasanen[] +
+link:https://github.com/freebsd/freebsd-src/compare/main...illuusio:freebsd-src:update-spdx-licenses[SPDX-License-Identifiers up-to review and waiting for upstreaming] URL: link:https://github.com/freebsd/freebsd-src/compare/main...illuusio:freebsd-src:update-spdx-licenses[] +
+link:https://reviews.freebsd.org/D55461[Issue open for commenting and review: caesar: Add SPDX-License-Identifier tags] URL: https://reviews.freebsd.org/D55461[] +
+link:https://github.com/illuusio/freebsd-src/tree/sbom-pkgconfig/release/sbom[.pc file for SBOM metadata (WIP)] URL: https://github.com/illuusio/freebsd-src/tree/sbom-pkgconfig/release/sbom
+
+Contact: Tuukka Pasanen <tuukka.pasanen@ilmi.fi>
+
+The FreeBSD Software Bill of Materials (SBOM) project started in 2025 and continued in 2026. Work in 2026 has been more about EU Cyber Resilience Act (CRA) and focus has shifted to delivering a framework for FreeBSD source.
+
+First quarter of 2026 delivered SBOM work in three categories:
+* Pkgconf upstream work especially with spdxtool-tool which is for creating SPDX Lite 3.0.1 JSON-LD SBOMs from [.filename]#.pc#-files. Several missing features have been added and have been under active work by pkgconf contributors. The tool is now nearly compatible with SPDX Lite 3.0.1 requirements and is ready for general use. Besides that there is an effort to import pkgconf as part of the FreeBSD source, lead by Pierre Pronchery.
+* Adding missing SPDX-License-Identifier to files under FreeBSD source [.filename]#bin#, [.filename]#sbin#, [.filename]#usr.bin# and [.filename]#usr.sbin# -directories.
+* Creating [.filename]#.pc#-files for SBOM. First patch should be start to land on 2026Q2. They are from [.filename]#bin#.
+
+If you want to help with this effort:
+
+* Verify SPDX-License-Identifier licenses are correct and help upstreaming files
+* Verify [.filename]#.pc# for that information which they hold is correct and help upstreaming files to git
+* Help reviewing pkgconf import to FreeBSD source
+
+Sponsor: The FreeBSD Foundation

File Metadata

Mime Type
text/plain
Expires
Sun, Apr 19, 7:30 AM (10 h, 43 m)
Storage Engine
blob
Storage Format
Raw Data
Storage Handle
31482321
Default Alt Text
D56299.id175438.diff (4 KB)

Event Timeline