From: Michael Nosthoff via buildroot <buildroot@buildroot.org>
To: "Thomas Perale" <thomas.perale@essensium.com>
Cc: Robert Smigielski <ptdropper@gmail.com>,
Thomas Perale <thomas.perale@mind.be>,
Thomas Petazzoni <thomas.petazzoni@bootlin.com>,
buildroot@buildroot.org
Subject: Re: [Buildroot] [RFC PATCH 0/5] Support SBOM in CycloneDX format
Date: Fri, 05 Apr 2024 11:21:03 +0200 [thread overview]
Message-ID: <21d09-660fc280-5-914bd10@117861333> (raw)
In-Reply-To: <20240404124329.768546-1-thomas.perale@mind.be>
Hi Thomas,
Great that you're taking up this topic. I'm highly interested because I'm currently generating my sbom "by hand" using a small python script which
converts the output of show-info. But yours is already better as it adds the dependency info and also fills the purl field (to the best of its knowledge).
Did you see the work of Robert (i added him in CC)? He submitted a script to the list some time ago which can run on the manifest.csv [0].
Maybe there are some synergies.
First feedback:
I created my SBOM using your patchset and put it into our dependency track instance. Looks promising.
One thing that I noticed:
when running `make cyclonedx` I first get the output of wget which retrieves the cyclonedx schema.
So I have to cut it from the output to have proper json. Maybe you want to silence this in some way.
I'll keep playing around and will give you further feedback if I'm noticing things.
Regards,
Michael
[0] https://github.com/CycloneDX/cyclonedx-buildroot
On Thursday, April 04, 2024 14:43 CEST, Thomas Perale via buildroot <buildroot@buildroot.org> wrote:
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
next prev parent reply other threads:[~2024-04-05 9:21 UTC|newest]
Thread overview: 17+ messages / expand[flat|nested] mbox.gz Atom feed top
2024-04-04 12:43 [Buildroot] [RFC PATCH 0/5] Support SBOM in CycloneDX format Thomas Perale via buildroot
2024-04-04 12:43 ` [Buildroot] [RFC PATCH 1/5] package/pkg-generic.mk: add PURL package variable Thomas Perale via buildroot
2024-04-04 12:43 ` [Buildroot] [RFC PATCH 2/5] package/pkg-utils.mk: urlencode/urldecode macros Thomas Perale via buildroot
2024-04-07 17:44 ` Yann E. MORIN
2024-04-07 19:21 ` Arnout Vandecappelle via buildroot
2024-04-04 12:43 ` [Buildroot] [RFC PATCH 3/5] support/misc/cyclonedx.mk: support CycloneDX format Thomas Perale via buildroot
2024-04-04 12:43 ` [Buildroot] [RFC PATCH 4/5] support/misc/cyclonedx.mk: support spdx license check Thomas Perale via buildroot
2024-04-04 12:43 ` [Buildroot] [RFC PATCH 5/5] Makefile: add command to generate SBOM in CycloneDX format Thomas Perale via buildroot
2024-04-05 9:21 ` Michael Nosthoff via buildroot [this message]
2024-04-05 21:31 ` [Buildroot] [RFC PATCH 0/5] Support " Thomas Perale via buildroot
2024-04-07 21:15 ` Thomas Petazzoni via buildroot
2024-04-08 19:15 ` Yann E. MORIN
2024-04-09 12:17 ` Arnout Vandecappelle via buildroot
2024-04-10 17:21 ` Yann E. MORIN
2024-04-10 19:26 ` Arnout Vandecappelle via buildroot
2024-04-10 20:10 ` Thomas Petazzoni via buildroot
2024-04-10 20:55 ` Yann E. MORIN
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=21d09-660fc280-5-914bd10@117861333 \
--to=buildroot@buildroot.org \
--cc=buildroot@heine.tech \
--cc=ptdropper@gmail.com \
--cc=thomas.perale@essensium.com \
--cc=thomas.perale@mind.be \
--cc=thomas.petazzoni@bootlin.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox