SPDX 3.0 output for image builds

SPDX 3.0 output for image builds

[kateryna.kostiuk]

[-- Attachment #1: Type: text/plain, Size: 289 bytes --]

Hi,

I’m using Yocto 5.2 with INHERIT += "create-spdx" to generate SPDX 3.0 files.

In earlier versions (SPDX 2), I used to get a.spdx.tar.zst archive in tmp/deploy/images/ , but now I only see a.spdx.json file.

Is that the expected behavior for SPDX 3.0?

Thanks,

Kateryna

[-- Attachment #2: Type: text/html, Size: 3099 bytes --]

Re: [yocto] SPDX 3.0 output for image builds

[Joshua Watt]

[-- Attachment #1: Type: text/plain, Size: 974 bytes --]

On Wed, Jul 30, 2025 at 2:10 PM kateryna.kostiuk via lists.yoctoproject.org
<kateryna.kostiuk=savoirfairelinux.com@lists.yoctoproject.org> wrote:

> Hi,
>
>
>
> I’m using Yocto 5.2 with INHERIT += "create-spdx" to generate SPDX 3.0
> files.
>
> In earlier versions (SPDX 2), I used to get a .spdx.tar.zst archive in
> tmp/deploy/images/, but now I only see a .spdx.json file.
>
> Is that the expected behavior for SPDX 3.0?
>

Yes. For SPDX 3 we combine all of the SPDX output into a single document.


>
>
> Thanks,
>
> Kateryna
>
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#65725):
> https://lists.yoctoproject.org/g/yocto/message/65725
> Mute This Topic: https://lists.yoctoproject.org/mt/114455825/3616693
> Group Owner: yocto+owner@lists.yoctoproject.org
> Unsubscribe: https://lists.yoctoproject.org/g/yocto/unsub [
> JPEWhacker@gmail.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>
>

[-- Attachment #2: Type: text/html, Size: 3800 bytes --]