Fixes: 00864cf5bc meta: Add tag in SRC_URI to multiple recipes When this fragment is enabled, SRCREV is set to AUTOREV, but this then causes do_unpack to fail for both sbom-cve-check-update-cvelist-native and sbom-cve-check-update-nvd-native, since the tag SRCREV does not match with the 'main' HEAD AUTOREV.
Rather than allow the tag to float, for those that desire reproducible builds with just IMAGES_CLASSES:append = " sbom-cve-check" and not this fragment, set SRC_URI **without** the tag= in this fragment. Signed-off-by: Tim Orling <[email protected]> --- meta/conf/fragments/yocto/sbom-cve-check.conf | 3 +++ 1 file changed, 3 insertions(+) diff --git a/meta/conf/fragments/yocto/sbom-cve-check.conf b/meta/conf/fragments/yocto/sbom-cve-check.conf index 73ed35be27..46f6965a0d 100644 --- a/meta/conf/fragments/yocto/sbom-cve-check.conf +++ b/meta/conf/fragments/yocto/sbom-cve-check.conf @@ -13,6 +13,9 @@ IMAGE_CLASSES:append = " sbom-cve-check" SRCREV:pn-sbom-cve-check-update-nvd-native = "${AUTOREV}" SRCREV:pn-sbom-cve-check-update-cvelist-native = "${AUTOREV}" +# Drop the tag= or else do_unpack fails +SRC_URI:pn-sbom-cve-check-update-cvelist-native = "git://github.com/CVEProject/cvelistV5.git;branch=main;protocol=https;destsuffix=" +SRC_URI:pn-sbom-cve-check-update-nvd-native = "git://github.com/fkie-cad/nvd-json-data-feeds.git;branch=main;protocol=https;destsuffix=" SPDX_INCLUDE_VEX = "all" SPDX_INCLUDE_COMPILED_SOURCES:pn-linux-yocto = "1" -- 2.55.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241871): https://lists.openembedded.org/g/openembedded-core/message/241871 Mute This Topic: https://lists.openembedded.org/mt/120417212/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
