eclipse-leda / leda-distro

Eclipse Leda provides a Yocto-based build setup for SDV.EDGE components
https://eclipse-leda.github.io/leda/
Apache License 2.0
14 stars 8 forks source link

SPDX scanner and SBOM creation #11

Closed mikehaller closed 1 year ago

mikehaller commented 1 year ago

Added generation of SBOM documents to the build process.

For each package/recipe, meta-spdxscanner will create SPDX JSON files and archive them up, so that they will be distributed together with the binary release. We're adding this to the leda-distro repository to keep the meta-leda layer clean of tooling metalayer dependencies.