From: Stefan Herbrechtsmeier <stefan.herbrechtsme...@weidmueller.com>
Use the name and version parameter from the SRC_URI to determine the
name and version of the download dependency.
Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsme...@weidmueller.com>
---
meta/classes/create-spdx-2.2.bbclass | 9 +++++++++
1 file changed, 9 insertions(+)
diff --git a/meta/classes/create-spdx-2.2.bbclass
b/meta/classes/create-spdx-2.2.bbclass
index de993ff5bf..aa195f5aa7 100644
--- a/meta/classes/create-spdx-2.2.bbclass
+++ b/meta/classes/create-spdx-2.2.bbclass
@@ -358,6 +358,15 @@ def add_download_packages(d, doc, recipe):
package.name = "%s-source-%d" % (d.getVar("PN"), download_idx + 1)
package.SPDXID = oe.sbom.get_download_spdxid(d, download_idx + 1)
+ vendor = f.parm.get("vendor")
+ if vendor:
+ package_name = f.parm.get("name")
+ if package_name:
+ package.name = package_name
+ version = f.parm.get("version")
+ if version:
+ package.versionInfo = version
+
if f.type == "file":
continue
--
2.39.5
-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#211131):
https://lists.openembedded.org/g/openembedded-core/message/211131
Mute This Topic: https://lists.openembedded.org/mt/111123522/21656
Group Owner: openembedded-core+ow...@lists.openembedded.org
Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub
[arch...@mail-archive.com]
-=-=-=-=-=-=-=-=-=-=-=-
