Re: [PATCH v2 00/14] Add SPDX SBOM generation tool

Miguel Ojeda
2026-01-25T15:30:29Z

On Thu, Jan 22, 2026 at 9:32 PM Luis Augenstein
<luis.augenstein@tngtech.com> wrote:
>
> The main reason to run the SBOM tool within the main make process is to
> gain direct access to the make/environment variables used during the
> build. The `KERNEL_BUILD_VARIABLES_ALLOWLIST` defines which environment
> variables should be included in the SBOM if they are available. When the
> tool is run outside of the main build, this information is no longer
> accessible.

I was not suggesting to take it out of `make` completely if the
environment is needed, but rather have the user call the target (which
could still depend on the kernel build like you have it now).

For instance, for generating the rust-analyzer configuration, we want
to have the environment too, so we have a Make target that users call
when they need it, rather than making it a configuration of the
kernel.

Now, I can understand there may be other reasons (please see my reply to Greg).

Thanks!

Cheers,
Miguel