cdxgen
cdxgen copied to clipboard
Support for buildroot .mk files
buildroot/package directory has one directory per package.
Each package directory has a .mk file.
https://github.com/teslamotors/buildroot/blob/buildroot-2019.02/package/bison/bison.mk
The directory name is the package's name, and the *_VERSION in the .mk file is the version.
Map _SOURCE to pkg.distribution = {url: url}
. index.js to be enhanced to set the externalReference
based on pkg.distribution.url
https://github.com/CycloneDX/cdxgen/blob/master/index.js#L600
Map _LICENSE to pkg.license
Note that Buildroot has a "make" target that provides the license information and a CSV listing of all packages used in the build in one folder. Executing "make legal-info" produces the folder containing loads of details that can be used for both SBOM and OSS License data. It is a feature of Buildroot.
@ptdropper, could you share the output file from make legal-info
?