Re: [OE-core][PATCH v6 04/15] spdx3: Add recipe SBoM task

Richard Purdie
2026-03-12T11:50:59Z

On Tue, 2026-03-10 at 12:38 -0600, Joshua Watt via lists.openembedded.org wrote:
> Adds a task that will create the complete recipe-level SBoM for a given
> target recipe, following all dependencies. For example:
>
> ```
> bitbake -c create_recipe_sbom zstd
> ```
>
> Would produce the complete recipe SBoM for the zstd recipe, include all
> build time dependencies (recursively).
>
> The complete SBoM for all (target) recipes can be built with:
>
> ```
> bitbake -c create_recipe_sbom meta-world-recipe-sbom
> ```
>
> Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>

With this change I got a bit confused as it wasn't obvious which task
you'd run just looking at the meta-world-recipe-sbom recipe.

Should that recipe do something like:

addtask create_recipe_sbom before do_build

so that the recipe actually triggers the thing which it is there for?

Cheers,

Richard