{"id":2215859,"url":"http://patchwork.ozlabs.org/api/covers/2215859/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/cover/20260325133343.1008245-1-martin@strongswan.org/","project":{"id":27,"url":"http://patchwork.ozlabs.org/api/projects/27/?format=json","name":"Buildroot development","link_name":"buildroot","list_id":"buildroot.buildroot.org","list_email":"buildroot@buildroot.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<20260325133343.1008245-1-martin@strongswan.org>","list_archive_url":null,"date":"2026-03-25T13:33:38","name":"[v3,0/5] Extend CycloneDX metadata","submitter":{"id":736,"url":"http://patchwork.ozlabs.org/api/people/736/?format=json","name":"Martin Willi","email":"martin@strongswan.org"},"mbox":"http://patchwork.ozlabs.org/project/buildroot/cover/20260325133343.1008245-1-martin@strongswan.org/mbox/","series":[{"id":497444,"url":"http://patchwork.ozlabs.org/api/series/497444/?format=json","web_url":"http://patchwork.ozlabs.org/project/buildroot/list/?series=497444","date":"2026-03-25T13:33:39","name":"Extend CycloneDX metadata","version":3,"mbox":"http://patchwork.ozlabs.org/series/497444/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/covers/2215859/comments/","headers":{"Return-Path":"","X-Original-To":["incoming-buildroot@patchwork.ozlabs.org","buildroot@buildroot.org"],"Delivered-To":["patchwork-incoming-buildroot@legolas.ozlabs.org","buildroot@buildroot.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (2048-bit key;\n unprotected) header.d=buildroot.org header.i=@buildroot.org\n header.a=rsa-sha256 header.s=default header.b=pa8ejf1Z;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=buildroot.org\n (client-ip=140.211.166.138; helo=smtp1.osuosl.org;\n envelope-from=buildroot-bounces@buildroot.org; receiver=patchwork.ozlabs.org)"],"Received":["from smtp1.osuosl.org (smtp1.osuosl.org [140.211.166.138])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4fgntY4ZXYz1xy3\n\tfor ;\n Thu, 26 Mar 2026 00:33:57 +1100 (AEDT)","from localhost (localhost [127.0.0.1])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 30F3C8224A;\n\tWed, 25 Mar 2026 13:33:55 +0000 (UTC)","from smtp1.osuosl.org ([127.0.0.1])\n by localhost (smtp1.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id ygWzReD8DoTY; Wed, 25 Mar 2026 13:33:54 +0000 (UTC)","from lists1.osuosl.org (lists1.osuosl.org [140.211.166.142])\n\tby smtp1.osuosl.org (Postfix) with ESMTP id 5D45D8230A;\n\tWed, 25 Mar 2026 13:33:54 +0000 (UTC)","from smtp3.osuosl.org (smtp3.osuosl.org [IPv6:2605:bc80:3010::136])\n by lists1.osuosl.org (Postfix) with ESMTP id 83D36353\n for ; Wed, 25 Mar 2026 13:33:51 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by smtp3.osuosl.org (Postfix) with ESMTP id 756736130C\n for ; Wed, 25 Mar 2026 13:33:51 +0000 (UTC)","from smtp3.osuosl.org ([127.0.0.1])\n by localhost (smtp3.osuosl.org [127.0.0.1]) (amavis, port 10024) with ESMTP\n id 4U3iXJQrOdQe for ;\n Wed, 25 Mar 2026 13:33:50 +0000 (UTC)","from mail.codelabs.ch (mail.codelabs.ch [109.202.192.35])\n by smtp3.osuosl.org (Postfix) with ESMTPS id 0575460F34\n for ; Wed, 25 Mar 2026 13:33:49 +0000 (UTC)","from localhost (localhost [127.0.0.1])\n by mail.codelabs.ch (Postfix) with ESMTP id 701655A0008;\n Wed, 25 Mar 2026 14:33:47 +0100 (CET)","from mail.codelabs.ch ([127.0.0.1])\n by localhost (fenrir.codelabs.ch [127.0.0.1]) (amavis, port 10024) with ESMTP\n id hh_ji4gqXncN; Wed, 25 Mar 2026 14:33:46 +0100 (CET)","from zbook.home (unknown [185.12.128.224])\n by mail.codelabs.ch (Postfix) with ESMTPSA id 159435A0002;\n Wed, 25 Mar 2026 14:33:46 +0100 (CET)"],"X-Virus-Scanned":["amavis at osuosl.org","amavis at osuosl.org"],"X-Comment":"SPF check N/A for local connections - client-ip=140.211.166.142;\n helo=lists1.osuosl.org; envelope-from=buildroot-bounces@buildroot.org;\n receiver= ","DKIM-Filter":["OpenDKIM Filter v2.11.0 smtp1.osuosl.org 5D45D8230A","OpenDKIM Filter v2.11.0 smtp3.osuosl.org 0575460F34"],"DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=buildroot.org;\n\ts=default; t=1774445634;\n\tbh=pRAqTy/tRjXLnUlKT3EvJF60+FoWF++NzxYQZW7OAik=;\n\th=From:To:Cc:Date:Subject:List-Id:List-Unsubscribe:List-Archive:\n\t List-Post:List-Help:List-Subscribe:From;\n\tb=pa8ejf1ZF+LpydhutQO3DhGdHzH15b1MPqwF/AZojY+1XwmHZMhBGicwNiJKRKL8K\n\t +qrGr/rfvNSAYMEByAYUTAo4xlU1ACTviUUrbLOsjVSbak/BUfPlGzKVk8XRiESVi3\n\t N1vSIG5Pp433ehb3g70dvdoWOehC3I1tIqUeYIGSJgwbwnZa4Vzgxt06ExnmHLN0lF\n\t StSIHJ3wyrgeSLG+4RRexkQNVF3SmBaZg2pZV3T9TjRS0v7KayNkWe8xEr1usz/bwl\n\t g2hEyVkqhEIDlErlvwGVeLW5R/q+hlnfXnMCc0QZU4jBEW6Qp5p0mji8TJpkb3fXOH\n\t EIiw7Vn+Nk4Ag==","Received-SPF":"Pass (mailfrom) identity=mailfrom; client-ip=109.202.192.35;\n helo=mail.codelabs.ch; envelope-from=martin@strongswan.org;\n receiver=","DMARC-Filter":"OpenDMARC Filter v1.4.2 smtp3.osuosl.org 0575460F34","From":"Martin Willi ","To":"buildroot@buildroot.org","Cc":"Thomas Perale ","Date":"Wed, 25 Mar 2026 14:33:38 +0100","Message-ID":"<20260325133343.1008245-1-martin@strongswan.org>","MIME-Version":"1.0","X-Mailman-Original-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple;\n d=strongswan.org; s=default; t=1774445626;\n bh=2MYUTpYfJJrl4Ew0oPQ7TJLo45cGry000YEHPMdlvvw=;\n h=From:To:Cc:Subject:Date:From;\n b=VjYomQ49j8VPVr6ITxgy5A6rH+6qizxzsr4Jp8Rm8E3xWArcP0OWH8JYjyCZM4a4t\n bPG5da3SNdoQMCBhQJDCJhT48i9QR7wUBtPbvhoNEvHUGXLN0hX7FyDKKYAwXB/R57\n GAjbRVI6y6GGEdRcqO54HvApbMWyCe9DZrf59MuIa0lXHZk9lkJozaCPqF/NXOO4vB\n akjslLIJ93QC+d7qrFzE+E+hJtGfNFAUVlATS0a8dmLJ2DqEntpFVvyp6/becx0lFf\n eN3TAB0AAmRZfWokufWuKH0GkifPcgA4jJC79DoJp4cY9wJ56AsInRUSCol6S/mLKr\n RGBYZfLUX+oRA==","X-Mailman-Original-Authentication-Results":["smtp3.osuosl.org;\n dmarc=pass (p=none dis=none)\n header.from=strongswan.org","smtp3.osuosl.org;\n dkim=pass (2048-bit key,\n unprotected) header.d=strongswan.org header.i=@strongswan.org\n header.a=rsa-sha256 header.s=default header.b=VjYomQ49"],"Subject":"[Buildroot] [PATCH v3 0/5] Extend CycloneDX metadata","X-BeenThere":"buildroot@buildroot.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Discussion and development of buildroot ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Content-Type":"text/plain; charset=\"us-ascii\"","Content-Transfer-Encoding":"7bit","Errors-To":"buildroot-bounces@buildroot.org","Sender":"\"buildroot\" "},"content":"Adds SBOM component externalReferences with source-distribution URLs and \nhashes, basic unit-tests and a minor fix root component dependencies.\n\nChanges v2 -> v3:\n - Add tests and indirect dependency fix from [1], make series standalone\n - Drop build-phase/timestamp patches\n - Drop manufacturer URL patches for now\n - Include hash files in show-info output\n\n[1] https://lists.buildroot.org/pipermail/buildroot/2026-March/798111.html\n\nMartin Willi (5):\n support/testing/utils: add basic tests for utils/generate-cyclonedx\n utils/generate-cyclonedx: remove indirect dependencies from root\n component\n utils/generate-cyclonedx: generate externalReferences with\n source-distribution\n package/pkg-utils: add 'hashes' to show-info\n utils/generate-cyclonedx: add hashes from .hash files to\n externalReferences\n\n package/pkg-utils.mk | 7 +\n .../tests/utils/test_generate_cyclonedx.py | 208 ++++++++++++++++++\n .../cve_upstream.patch | 11 +\n utils/generate-cyclonedx | 92 +++++++-\n 4 files changed, 317 insertions(+), 1 deletion(-)\n create mode 100644 support/testing/tests/utils/test_generate_cyclonedx.py\n create mode 100644 support/testing/tests/utils/test_generate_cyclonedx/cve_upstream.patch"}