All of lore.kernel.org
 help / color / mirror / Atom feed
* [PATCH 1/2] linux/generate-cve-exclusions: show the name and version of the data source
@ 2025-05-29 10:58 Ross Burton
  2025-05-29 10:58 ` [PATCH 2/2] linux-yocto: refresh CVE exclusions Ross Burton
  2025-05-30  7:06 ` [OE-core] [PATCH 1/2] linux/generate-cve-exclusions: show the name and version of the data source Mikko Rapeli
  0 siblings, 2 replies; 3+ messages in thread
From: Ross Burton @ 2025-05-29 10:58 UTC (permalink / raw)
  To: openembedded-core

Add another comment to state what the data source for the CVE data was,
specifically the basename of the repository and the "git describe" output
of HEAD.

Signed-off-by: Ross Burton <ross.burton@arm.com>
---
 meta/recipes-kernel/linux/generate-cve-exclusions.py | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/meta/recipes-kernel/linux/generate-cve-exclusions.py b/meta/recipes-kernel/linux/generate-cve-exclusions.py
index b45c2d5702a..dfc16663a58 100755
--- a/meta/recipes-kernel/linux/generate-cve-exclusions.py
+++ b/meta/recipes-kernel/linux/generate-cve-exclusions.py
@@ -11,6 +11,7 @@ import json
 import pathlib
 import os
 import glob
+import subprocess
 
 from packaging.version import Version
 
@@ -92,13 +93,16 @@ def main(argp=None):
     parser.add_argument("version", type=Version, help="Kernel version number to generate data for, such as 6.1.38")
 
     args = parser.parse_args(argp)
-    datadir = args.datadir
+    datadir = args.datadir.resolve()
     version = args.version
     base_version = Version(f"{version.major}.{version.minor}")
 
+    data_version = subprocess.check_output(("git", "describe", "--tags", "HEAD"), cwd=datadir, text=True)
+
     print(f"""
 # Auto-generated CVE metadata, DO NOT EDIT BY HAND.
-# Generated at {datetime.datetime.now(datetime.timezone.utc)} for version {version}
+# Generated at {datetime.datetime.now(datetime.timezone.utc)} for kernel version {version}
+# From {datadir.name} {data_version}
 
 python check_kernel_cve_status_version() {{
     this_version = "{version}"
-- 
2.43.0



^ permalink raw reply related	[flat|nested] 3+ messages in thread
end of thread, other threads:[~2025-05-30  7:07 UTC | newest]

Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2025-05-29 10:58 [PATCH 1/2] linux/generate-cve-exclusions: show the name and version of the data source Ross Burton
2025-05-29 10:58 ` [PATCH 2/2] linux-yocto: refresh CVE exclusions Ross Burton
2025-05-30  7:06 ` [OE-core] [PATCH 1/2] linux/generate-cve-exclusions: show the name and version of the data source Mikko Rapeli

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.