While the SPDX ID aliases are primarily intended for internal use by the SPDX code, they are used in places where a valid SPDX ID is expected. In order to make sure that they still conform to this, prefix them with "http://spdx.org/spdxdocs/openembedded-alias"
Signed-off-by: Joshua Watt <jpewhac...@gmail.com> --- meta/lib/oe/sbom30.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/meta/lib/oe/sbom30.py b/meta/lib/oe/sbom30.py index 56cdd7ba4c6..7acb5234db2 100644 --- a/meta/lib/oe/sbom30.py +++ b/meta/lib/oe/sbom30.py @@ -344,7 +344,9 @@ class ObjectSet(oe.spdx30.SHACLObjectSet): alias_ext = set_alias( e, e._id.replace(unihash, "UNIHASH").replace( - namespace, self.d.getVar("PN") + namespace, + "http://spdx.org/spdxdocs/openembedded-alias/" + + self.d.getVar("PN"), ), ) -- 2.47.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#207646): https://lists.openembedded.org/g/openembedded-core/message/207646 Mute This Topic: https://lists.openembedded.org/mt/109729854/21656 Group Owner: openembedded-core+ow...@lists.openembedded.org Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-