Hi Mathieu,
 
After apply all the 4 patches,
[PATCH 1/4] meta/lib/oe/sbom30.py: correct alias
[PATCH 2/4] meta/lib/oe/spdx30_tasks.py: fix hash link conflict while multiconfig enabled
[PATCH V2 3/4] gcc-cross.inc: add var-SSTATE_ARCHS_TUNEPKG to vardeps of do_create_spdx
[PATCH V3 4/4] meta/lib/oe/sbom30.py: fix alias in simplelicensing_customIdToUri not extracted
 
$ bitbake core-image-sato core-image-sato-sdk core-image-minimal core-image-sato:do_populate_sdk core-image-minimal:do_populate_sdk_ext core-image-sato:do_populate_sdk_ext
 
I could not re-produce the WARNING, from the  autobuilder log [1], I doubt the issue was caused by sstate cache between multiple builds with different poky sources
 
$ grep openssl stdio -n | grep spdx 
2775:NOTE: Running setscene task 1619 of 7903 (virtual:nativesdk:/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_packa
ge_spdx_setscene)
2805:NOTE: recipe nativesdk-openssl-3.4.0-r0: task do_create_package_spdx_setscene: Started
2823:NOTE: recipe nativesdk-openssl-3.4.0-r0: task do_create_package_spdx_setscene: Succeeded
6774:NOTE: Running setscene task 3110 of 7903 (/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_package_spdx_setscene)
6799:NOTE: recipe openssl-3.4.0-r0: task do_create_package_spdx_setscene: Started
6823:NOTE: recipe openssl-3.4.0-r0: task do_create_package_spdx_setscene: Succeeded
7879:NOTE: Running setscene task 3505 of 7903 (virtual:native:/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_package spdx_setscene)
7909:NOTE: recipe openssl-native-3.4.0-r0: task do_create_package_spdx_setscene: Started
7929:NOTE: recipe openssl-native-3.4.0-r0: task do_create_package_spdx_setscene: Succeeded
13460:NOTE: Running setscene task 5732 of 7903 (virtual:nativesdk:/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_spd _setscene)
13494:NOTE: recipe nativesdk-openssl-3.4.0-r0: task do_create_spdx_setscene: Started
13512:NOTE: recipe nativesdk-openssl-3.4.0-r0: task do_create_spdx_setscene: Succeeded
15764:NOTE: Running setscene task 7051 of 7903 (/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_spdx_setscene)
15788:NOTE: recipe openssl-3.4.0-r0: task do_create_spdx_setscene: Started
15814:NOTE: recipe openssl-3.4.0-r0: task do_create_spdx_setscene: Succeeded
16806:NOTE: Running setscene task 7666 of 7903 (virtual:native:/srv/pokybuild/yocto-worker/qemuarm64-armhost/build/meta/recipes-connectivity/openssl/openssl_3.4.0.bb:do_create_spdx_se
tscene)
16823:NOTE: recipe openssl-native-3.4.0-r0: task do_create_spdx_setscene: Started
16832:NOTE: recipe openssl-native-3.4.0-r0: task do_create_spdx_setscene: Succeeded
19470:  http://spdxdocs.org/openembedded-alias/by-doc-hash/82b2ddffbd624bcb26b4c93f8e7bf31e456ea81a1e5720354726d1fc7e433dd0/openssl/UNIHASH/package/openssl-bin
19471:  http://spdxdocs.org/openembedded-alias/by-doc-hash/882a5d190518b194aea7380573eeee8a79f524131463308e414d0cb51f9a8099/openssl/UNIHASH/package/openssl
19482:  http://spdxdocs.org/openembedded-alias/by-doc-hash/abb77695d73c96547fa2c4d5d658cd5c44a6ca7b4f0c07889cbf868d6c832bb1/openssl-native/UNIHASH/build/recipe
19866:  http://spdxdocs.org/openembedded-alias/by-doc-hash/abb77695d73c96547fa2c4d5d658cd5c44a6ca7b4f0c07889cbf868d6c832bb1/openssl-native/UNIHASH/build/recipe
19965:  http://spdxdocs.org/openembedded-alias/by-doc-hash/82b2ddffbd624bcb26b4c93f8e7bf31e456ea81a1e5720354726d1fc7e433dd0/openssl/UNIHASH/package/openssl-bin
19967:  http://spdxdocs.org/openembedded-alias/by-doc-hash/882a5d190518b194aea7380573eeee8a79f524131463308e414d0cb51f9a8099/openssl/UNIHASH/package/openssl
19982:  http://spdxdocs.org/openembedded-alias/by-doc-hash/abb77695d73c96547fa2c4d5d658cd5c44a6ca7b4f0c07889cbf868d6c832bb1/openssl-native/UNIHASH/build/recipe
20069:  http://spdxdocs.org/openembedded-alias/by-doc-hash/abb77695d73c96547fa2c4d5d658cd5c44a6ca7b4f0c07889cbf868d6c832bb1/openssl-native/UNIHASH/build/recipe
 
[1] https://valkyrie.yoctoproject.org/api/v2/logs/928428/raw
 
//Hongxu