mirror of
git://git.yoctoproject.org/poky.git
synced 2025-07-19 21:09:03 +02:00
36be59464c
Adds a template for a python project that processes the SPDX 3.0.1 output from a build and lists all the files on the root file system with their checksums This is intended to be an example to show how to deal with the SPDX data to do common tasks. (From OE-Core rev: 3d9c5588ce6181b519810e3378b55826ffcaee49) Signed-off-by: Joshua Watt <JPEWhacker@gmail.com> Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| src/oe_image_files | ||
| .gitignore | ||
| pyproject.toml | ||
| README.md | ||
OE Image Files from SBoM
This is an example python script that will list the packaged files with their checksums based on the SPDX 3.0.1 SBoM.
It can be used as a template for other programs to investigate output based on OE SPDX SBoMs
Installation
This project can be installed using an virtual environment:
python3 -m venv .venv
.venv/bin/activate
python3 -m pip install -e '.[dev]'
Usage
After installing, the oe-image-files program can be used to show the files, e.g.:
oe-image-files core-image-minimal-qemux86-64.rootfs.spdx.json