Re: [yocto] SPDX for dependency checks

2024-07-24 Thread Marta Rybczynska
On Wed, Jul 24, 2024 at 7:08 AM Tom Isaacson via lists.yoctoproject.org wrote: > We're using Kirkstone and wanted to take advantage of the SPDX support > to use for dependency checking. The two apps we have access to are: > 1. Github Dependabot > ( > https://docs.github.com/en/code-security/getti

[yocto] SPDX for dependency checks

2024-07-23 Thread Tom Isaacson via lists.yoctoproject.org
We're using Kirkstone and wanted to take advantage of the SPDX support to use for dependency checking. The two apps we have access to are: 1. Github Dependabot (https://docs.github.com/en/code-security/getting-started/dependabot-quickstart-guide) 2. Mend (https://www.mend.io/) We generate the SPDX