Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-06 Thread Alex Stewart
Thanks for the context; I'll feed this back into our internal discussions. Looks like I just missed the general meeting for this month. I've joined the ML and I'll try to attend in the future. On 2/5/23 05:08, Joshua Watt wrote: On Fri, Feb 3, 2023 at 12:26 PM Alex Stewart wrote: Hey Josh,

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-06 Thread Alex Stewart
On 2/5/23 08:11, Richard Purdie wrote: On Sat, 2023-02-04 at 15:47 -0600, Alex Stewart wrote: On 2/3/23 17:06, Richard Purdie wrote: On Fri, 2023-02-03 at 12:26 -0600, Alex Stewart wrote: Hey Josh, I have been roadmapping SBOM generation for NI's yocto distro and have a few open questions

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-05 Thread Richard Purdie
On Sat, 2023-02-04 at 15:47 -0600, Alex Stewart wrote: > On 2/3/23 17:06, Richard Purdie wrote: > > On Fri, 2023-02-03 at 12:26 -0600, Alex Stewart wrote: > > > Hey Josh, > > > > > > I have been roadmapping SBOM generation for NI's yocto distro and have a > > > few open questions about the future

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-05 Thread Joshua Watt
On Fri, Feb 3, 2023 at 12:26 PM Alex Stewart wrote: > > Hey Josh, > > I have been roadmapping SBOM generation for NI's yocto distro and have a > few open questions about the future of SPDX and the create-spdx bbclass. > Since your name seems to be attached to both of those, I figure you > might

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-04 Thread Alexander Kanavin
On Sat, 4 Feb 2023 at 22:47, Alex Stewart wrote: > > At this point OpenEmbedded/Yocto Project has decided to go the SPDX > > route for various reasons. > > Are those reasons documented somewhere? > > Something about CDX rubs me the wrong way (besides it being named like > an off-brand printer

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-04 Thread Alex Stewart
On 2/3/23 17:06, Richard Purdie wrote: On Fri, 2023-02-03 at 12:26 -0600, Alex Stewart wrote: Hey Josh, I have been roadmapping SBOM generation for NI's yocto distro and have a few open questions about the future of SPDX and the create-spdx bbclass. Since your name seems to be attached to both

Re: [OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-03 Thread Richard Purdie
On Fri, 2023-02-03 at 12:26 -0600, Alex Stewart wrote: > Hey Josh, > > I have been roadmapping SBOM generation for NI's yocto distro and have a > few open questions about the future of SPDX and the create-spdx bbclass. > Since your name seems to be attached to both of those, I figure you >

[OE-core] SPDX 3 and OE-core CycloneDX support

2023-02-03 Thread Alex Stewart
Hey Josh, I have been roadmapping SBOM generation for NI's yocto distro and have a few open questions about the future of SPDX and the create-spdx bbclass. Since your name seems to be attached to both of those, I figure you might have the best insight here. Also posting to the OE-core ML so