Re: [OE-core][PATCH v6 04/15] spdx3: Add recipe SBoM task

Joshua Watt
2026-03-12T14:12:51Z

On Thu, Mar 12, 2026 at 5:50 AM Richard Purdie
<richard.purdie@linuxfoundation.org> wrote:
>
> On Tue, 2026-03-10 at 12:38 -0600, Joshua Watt via lists.openembedded.org wrote:
> > Adds a task that will create the complete recipe-level SBoM for a given
> > target recipe, following all dependencies. For example:
> >
> > ```
> > bitbake -c create_recipe_sbom zstd
> > ```
> >
> > Would produce the complete recipe SBoM for the zstd recipe, include all
> > build time dependencies (recursively).
> >
> > The complete SBoM for all (target) recipes can be built with:
> >
> > ```
> > bitbake -c create_recipe_sbom meta-world-recipe-sbom
> > ```
> >
> > Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
>
> With this change I got a bit confused as it wasn't obvious which task
> you'd run just looking at the meta-world-recipe-sbom recipe.
>
> Should that recipe do something like:
>
> addtask create_recipe_sbom before do_build
>
> so that the recipe actually triggers the thing which it is there for?

Yes

>
> Cheers,
>
> Richard