[openwrt/openwrt] build: fix kernel component in CycloneDX SBOM

LEDE Commits lede-commits at lists.infradead.org
Fri Mar 1 09:22:20 PST 2024


robimarko pushed a commit to openwrt/openwrt.git, branch main:
https://git.openwrt.org/84331215e57090a9cdae4af75af2539c39cd7de7

commit 84331215e57090a9cdae4af75af2539c39cd7de7
Author: Cedric DOURLENT <cedric.dourlent at softathome.com>
AuthorDate: Fri Mar 1 16:42:34 2024 +0100

    build: fix kernel component in CycloneDX SBOM
    
    As stated in the cycloneDX documentation, the field "type" is mandatory for all components.
    
    More details here (https://cyclonedx.org/docs/1.5/json/#components_items_type)
    
    Signed-off-by: Cedric DOURLENT <cedric.dourlent at softathome.com>
---
 scripts/package-metadata.pl | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/scripts/package-metadata.pl b/scripts/package-metadata.pl
index 9e0e6dd9e5..a46f819ab5 100755
--- a/scripts/package-metadata.pl
+++ b/scripts/package-metadata.pl
@@ -677,6 +677,7 @@ sub gen_image_cyclonedxsbom() {
 		license => "GPL-2.0",
 		cpe_id  => "cpe:/o:linux:linux_kernel",
 		name    => "kernel",
+		category  => "operating-system",
 	};
 
 	my %abimap;
@@ -705,6 +706,7 @@ sub gen_image_cyclonedxsbom() {
 		if ($pkg->{category}) {
 			my $category = $pkg->{category};
 			my %cat_type = (
+				"operating-system"        => "operating-system",
 				"Firmware"        => "firmware",
 				"Libraries"       => "library"
 			);




More information about the lede-commits mailing list