From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 17 Nov 2025 14:36:44 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oa1-f58.google.com (mail-oa1-f58.google.com [209.85.160.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AHDaheW025747 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 17 Nov 2025 14:36:44 +0100 Received: by mail-oa1-f58.google.com with SMTP id 586e51a60fabf-3d1e14c1533sf9103152fac.3 for ; Mon, 17 Nov 2025 05:36:43 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1763386598; cv=pass; d=google.com; s=arc-20240605; b=Vm3sJT9bXb25LuVocywixwh+mi8tr9TO+aQiY5H9wo0HdLJOXe60ZnIFZnG6GS/7DF FeZ2X4q27wMk8utrfEBOpLkh8x46CcLXg5F+AUsUNdpBYrIM7lz/dbpLlE+WOfJCZS9O 8iq+0WJBiuR5piYV9os8yHrhCMIDYN4QNKZ9K/fqlTwpajBq7w4t9bjBocctapuBmB5+ vud40ZVMhzrjAdi5xuvCpJ0cJIlx55khXHWxUTymsYu6AKQFNbxodcTytjuHGKG13D+t 0R0KPfvUaaQvrnfrerCSWessfWnW89z62TOA6cN3GZeoiUnNthLIlMmcWMFnH7rbldxc 8EqA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; fh=bPvV/DYDTQY24VOAdCDNIv3zPenYIFD4rysCRWlivDo=; b=YwUcVe/BUzzoqpSXH8PnRnFMbcSIIazqLKct7Bh3JXdovjqOmV+1SVhTfXKTPPGvZ3 XeUY2aJZm5RHbWvkZc5YEQDxhEytA4Ozx+/pEsJ/pICRPVqU0oFDjAIB2ZfAnlLW35Dg GpS/NIB+DHhLa8LvrN9rf15fiLmu4zsC6WYNp0FSjffeFJbRDXhvm86+T2BY8Y4ilQEU HADAj2uBO3oKjqgc0HcLa8ON12Yx/7COBKM4Z3Og5rKTlsX34+0wMlX/zi5YfZ2vfjT/ r0nXjMpzwaDFJC7imTn0R9oFmN8Rbm5ZxHJ8G/XP3VRtpegO9F4t9/blPBYHnCqnw+yU 6fxQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763386598; x=1763991398; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; b=FH5qHGOVEvEUNxZmOZ9KDg/Cl6TPHYSAIcUVQzrUVc6erHQvWELEpvOg51WkYGvZT8 M8VjigT0BOZYHhpMkuLX0zG7Q8iLZfUDI1CpZcZPbBMhYtg65o6pwEXRXDt8JCG9TQqi g4h6anLHqdH9TwNkpR5PQQNGtYIzdW0J3StyUWkJml3XO7/7EH0qRRslEbGsXVFB50MX Bl6Sz+egFJnD0KuSDLjO1Ya+TnKURJPvpI1+kZ9PM7d7dJWr4Ozh6x9Mcr+Y77s0Bzj0 NnYNmQfAd9tkQVkeqdnwkrEML950OqzgGojUndBzwVhLemH9HogI0KBLEIvoplrx1T9i jiAw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763386598; x=1763991398; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; b=ZTpHT7tMfcRm5+NBN4sNfPaTWtjjw2ziYTDbK5TNUljm6EG/B58rrCZzPD9HLaq/Iz SAE3hzeh/qAPQgOxujvfELaA2kafaOOEa7kktoFb89Fj4mJhMFgOdxTNm+Kp04mP07or YslsHxvJ2d2vkUBjfwttOg6/ymQiEd066N/OBC8Mbi8gdeBRcuNUC0SFswt+UOjF1U0w gzzexiacZ/QFzriAzvCTsp71JmbX9J0bNHT/HDz5zkwLK4JidMpYgOozK4+HW7tsra6J 5bhXGCurim7UBvLLW7gTIKoQq2Yweos1umAaV9Nr0UaT3MMjVQtiA8u9dHkajhjIQc7d syWw== X-Forwarded-Encrypted: i=3; AJvYcCVhXJvaUe28BwVEF3amRbaWRnRIcZ1XLhnVNF6Wir1GvwDa60pqNATwxIRnAjOUc4gfESTk@ilbers.de X-Gm-Message-State: AOJu0YxRurEopMR2N3/aGqs5yKQqLQ4N5h62L2UOGPSat+204EnfAmYR 3oPNc3OElsSoT1eCU/k500wOLZC1vo0hyFT4ouM5Rj6REO//I5qzyG9z X-Google-Smtp-Source: AGHT+IF/3owJqIG1hQ18DfBS+CxtJRmNlc9UB/LgnS2Bvj7RvQaXLTnUQFi7V++sS9S8JjtHKsWAiQ== X-Received: by 2002:a05:6214:e67:b0:880:5b9a:72f2 with SMTP id 6a1803df08f44-882925c0b39mr139999316d6.20.1763385893810; Mon, 17 Nov 2025 05:24:53 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+Ygyu7YtKA8gtRjPr7ckCBfUrsmIW3Y/HLWv+FMOlE88A==" Received: by 2002:a05:6214:230c:b0:880:59ee:bbc with SMTP id 6a1803df08f44-88281af20a6ls94408606d6.1.-pod-prod-09-us; Mon, 17 Nov 2025 05:24:52 -0800 (PST) X-Received: by 2002:a05:6122:2191:b0:54a:9cff:6fe7 with SMTP id 71dfb90a1353d-55b1bd4b7b8mr4213405e0c.4.1763385891886; Mon, 17 Nov 2025 05:24:51 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763385891; cv=pass; d=google.com; s=arc-20240605; b=XWP6knr/V6cEnQ0eG+t7P7BEy/0mbMKeGFXQE18N1St92+BqESnLe/Jt4JCO41W9lt wiu9RgsYnupRNnVjKUDqKT5TAEHs1vsna9dGBTYMgD5LgDl0RJyNsYWewFBZTutCw3+L Tt+uPQ7hN9E+Ki3hL/MO1XVd5gVt3cNuuH76DqPUqPIy8zp7HcNXa+/DbYQ7ugYqU4l7 4oZIX5MpOkA2GvgFxLH9eh1Z415zua3Cwq0eZMaHSVUJaKupPeHMPXPcR1ex00ZYM89O cdd71HQ0AU7UvMfsAbPIqQTamZSuv3omOiFlt//E11xkn98CQX4jMbpXLdRiPQRulzRm iE+A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; fh=zpIZCuRUq+NRP8FVcTlT37OsigfSlMKhj97kagpZeyo=; b=l1HpiBDZrrvE8X6eaqHwHHNmNfdwpBYSp1sP2kDHNdLO9tca+1+1Sp3dX+FbUkua1a 55DBI/pv4k/5qiE+dE51wE9y1vdIwPgeF3Qqi86mE0rMvAh5fcRTPs26KGYrvz+ceuPX wuSeDF/KJWuzK/G7e/f0t1MdIWomsHltQS+24rzDysboEyUVN2RozI/i9w/+0lyKU8rH SN9VAoHY7W5nP44w2xU3eMQ3Z7GrQ/T6FMl4xG/hZPliJUh+qCqbWR1RKSDVl+3vdw+6 QweGuwWLi+fxNjNwwbV/whMOf+D92nznetZaTslD+iPInT5fxQ3DBXZQu1xcsyKT/A2k /ixA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 71dfb90a1353d-55b0f8ec887si629239e0c.3.2025.11.17.05.24.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 17 Nov 2025 05:24:51 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=alFNzwhPYyPma4sKnbgp8sEj45Eq55PDNev/tXXnleQoQibaNc9QGO3ZJ/LRURQrWrkxWpEzMEyoqIT3HOc2BTfj+fghuWv+ZrxTOMcI0eU8Xf4hvAqxSvpt8T1fGu0aaRSrVcgru5eNxHKfvY4H/dQgvzELRpM/x9/tfwtiJ1jojuRaXkrAogtdj1t15Akeax9tX1LRsR/tCstWTgZnC6+ZsmnVqdntkQWZlknKTDyYtQMOwcld+XutAK63DW51gkE3gmU52ToCkUTE1rpBUsZnWJBDuaHIeaVgwVKgyMMpQ4YVZzJSSeDXA3njPov+XeOtspZM+kbvYbszoqxlCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; b=DQp9HTjcQXD+EhRtZpwn7T9si7Qy6DlXJsuOBcObuonsPZKlSaI7SHQpDJ0kQvQTm1cFxVxYVGVndb7wGP1ckeXbz1SFR4pDUI35HpaVHwO1u4Ec8y6lTuskKryZ4X6rVKk2MIyH7nsEpLQBFrbNzaZ1C5PCjGlIRJQ5/JOF0FhJFrMOSQqPUrtwMqtsG81StTT98NmwHn8+m7CIytFLm41fVB1/AmPsZBsaJDXnMc6I0zu6ZQVURqges3uWSmF8x9Ovo9nA4G7HlD5EaJhktDrYBDyeqQiiHMrx9D/0yCFF1uIZQJv4ATN5LJ9qyY7BIZt+oYFXiRin0nHJ7ex0Kg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PAWPR10MB8044.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:383::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9320.21; Mon, 17 Nov 2025 13:24:47 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%4]) with mapi id 15.20.9320.021; Mon, 17 Nov 2025 13:24:47 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com Subject: [PATCH v4 02/10] meta: package python libraries for SBOM generation Date: Mon, 17 Nov 2025 14:24:28 +0100 Message-ID: <20251117132436.511686-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20251117132436.511686-1-felix.moessbauer@siemens.com> References: <20251117132436.511686-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR5P281CA0026.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:f1::11) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|PAWPR10MB8044:EE_ X-MS-Office365-Filtering-Correlation-Id: 258bb7f3-e08f-40de-c33e-08de25dcae0f X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1800799024|376014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?ErZn74HANb9QMIe7PwRDOXW8KNdf86F/0WZVAgXQoRktaqTKaeW3SWEKSCZN?= =?us-ascii?Q?3U0n2D0uEhKBCJbgpfB9k/f8dxK3ZpA3lhpEr+HS3m4+bfucLI/20FZc07c1?= =?us-ascii?Q?YeBHef2r7cpeEphNxxQF9oBU2qErrVai9PqmmYtgdqS/3qJXVLlz0lYVFYyg?= =?us-ascii?Q?kVS6dsHvRb82Bm06LTT+uvMscWkV1Mnrq6Gqht215fRbYyny/CEZ5kjol35s?= =?us-ascii?Q?+pGfz/b9w9sgeC4UmZCHZZZEEy6Vlvb61b6hlu9ia8Idava5p7qI+/fjVXNj?= =?us-ascii?Q?obkoAjkyngaibb7UoZ/MXEHgUJAaiNk/MF/ycR19Avsl5XAnxnAAUYtnvuj9?= =?us-ascii?Q?gy6yxRrbrmXjOQXkQxrpxYDUXMeHp4SLSpikUvb8Xzs0+j894DXGDgORSNsB?= =?us-ascii?Q?nsZpnQLaFlSjsCGZPZvI/tQN7lTdrUepJHkcstvKQOYBcLFFkFPSVRuHCHKS?= =?us-ascii?Q?0b8YjGiuT9y8YbOA6zCsHSkXbkKIuP2iSJfCXe3+lEz4c7REjMHv5v8DY10t?= =?us-ascii?Q?waFQS8S03z6kUVQFApfPV0SGr9NRd8bmpcRvzCmRZB0ZvD5hhidQ6nPivdb4?= =?us-ascii?Q?3Du5/GJTVxidwQd6Ert/sL1lyLck6viimWg+ny8837L2MwQTvZ3di+ZjdNcy?= =?us-ascii?Q?2YFYXc4fnooNu+01lKkt4sVCflsEIg6zDmsyvuuoIyISsImub/tTdch+wBnt?= =?us-ascii?Q?VnlYxT5WRsvlpQ342Ug7aWjQ6E/R2M2ZUlui8X4SK64Fc67iX51kjVbibM2y?= =?us-ascii?Q?Yw3gRx2ZTgN/N22AO9w5+Danh3gEZsJZ4JOnRZYbApexOOG1SE8utsWl4YE6?= =?us-ascii?Q?s38CWc70CgdXxRz0IP2KQv5Q8ScHPrFbALEpIaffSG1sBPwhDLvXNWT77TkR?= =?us-ascii?Q?mmlUaFZckN1Dt7uS8zZQ9X3zVoEuKe/Tk8bJTMc8EtwbYCuJxF2VZkVgzSZ7?= =?us-ascii?Q?Rtx71ubisVpZkEsgDyqZx0IPGv5gbs/+kiPiVzbCln588SpXxUv8MouTqqrO?= =?us-ascii?Q?7QBXOMSThxg8MdPYaMCNcPPl+Z7CVzVo52kJJrl+4LeYLtjB5HpEw18VcYGw?= =?us-ascii?Q?krByyWFAipynjq7fitTNeCQKf8S4XFo4hXOoj9q70LA/dkDKrZDElg6AbfiB?= =?us-ascii?Q?tH3/0XfLz8TFFSrtxbzwgTp7ufw3GvhQ9OJKyo+H1LNJySU7zLtk5STtHgD2?= =?us-ascii?Q?OhAzfEWWUhCColDik9MTrEvckFef6CvV626CAHgAumZFD/qazMmqNbjG/hs1?= =?us-ascii?Q?RfeOU4x8ni9dW897iRdfsakHjhxpL2GXg/Q9G2TokPPNm6hGr1f8xjLABOHx?= =?us-ascii?Q?lBHuunYUoIhGdEEPpdZBBFhR4awfe3Tm6GcA4+jpfBWOcqmDhpZzV1Bk2go6?= =?us-ascii?Q?TIbNNgpD/3T3TBIZFSLrLunEtfFkqpn+PA1Rcugcosjz3BZ6ahCv8jGSWq7g?= =?us-ascii?Q?mJfNNZgixdw=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?9sEoev3qKBk5GzXjdv3pDZ5STidnyvy+PsV7rFA/8yMiIRN2+iZEfgo1gM6V?= =?us-ascii?Q?J3+gHCqBPp+YCQnlq7rjs2IA4zz7aCOmIVVAOr8CxhGXS4XKhrLJ0c6a14Yz?= =?us-ascii?Q?wKnX2CEHqt4Z8fukiXh2FvVuirMnsVFpLgY4WJnuP38AM7n1afukLxZbI2MS?= =?us-ascii?Q?qabQvNa2oID+MClzGG7zeoCHXeLcs5u6+jw6+x5fh9pXFGBwexAh8pVoE8SK?= =?us-ascii?Q?NBtg0RSIAufC9cdjVsDtOQaUTrCyvDSUFFMYc16D4yl4Y7UjX5wFkCi/Yoqy?= =?us-ascii?Q?LoEBzD2X9kBEmUREoUD8P0xVtzJvcE0zZoMWQLzVm/Y7tP7XB+J4ARf0VPqA?= =?us-ascii?Q?X1XWAiSWq1ZVgmBQo1f/KmIARDBTuwB8VAqA4VaVrWrUoa3kMsRRVyvHb6yz?= =?us-ascii?Q?OIFXaT2z/ZIElmkPSRdAsL8yln5ewpoK8SS6sc6PZhoS/cKravsTZMdztkMm?= =?us-ascii?Q?Itl7HYmIjrr1/qEIgRTBNE0TH1eFWgdkwBm5p1RCv3gVHjvxe/AVv51BG9Vd?= =?us-ascii?Q?YUsySqgqOTYvbJe9wuwwwL1dzm5UsXeEvUnblpustMHQUuMCfQHJd+OYHHyL?= =?us-ascii?Q?G7sv10kHdY0GGyoZ79ek9Yg02NQfT8XHL/hjeBzwZR0SP+yUfKEp3cE3QiKt?= =?us-ascii?Q?RVJCDxHfWCcn3vSf/rOdxR+XsHyZmN7PJCEJcYq/EkY+xz2wmWBJcKcYsYWL?= =?us-ascii?Q?AgcrCQIWH9yySespNola9m4GaER5JnHtpdNIHFNB1k6y3NJAz5YuvqBnpuAG?= =?us-ascii?Q?6GpSoNUcMJcojH3NJcH7HoA2LQW5nvyTUiKi8quSNLsKy5MHZKEYY6GzEeFO?= =?us-ascii?Q?/hzCsGd42MVW8OGydWi8tnMK1c2TPHiX5n3EbFwWzry7XhGR9gDk9bJ4Vv/t?= =?us-ascii?Q?0Pnfnh1xXyhrEcrjgwcnEtjdS3br8QWxLF0b6ZJs5X1DDP+dfWmJ6cwyKysn?= =?us-ascii?Q?5mx+SlWXVpklMFmqNtusCR4iGCSNX3Ibve4kYBOrMxMBSKHP5u9nmStIg9Cs?= =?us-ascii?Q?cfiX1jJvQPS41K6nttcMXbr76ShH2tBXH65fB7yCH519jUPCVj3PbnTvutKz?= =?us-ascii?Q?jj0gUr2uM9D4Aqhe/987BgvPruzHcisfvK0p6dyPEDFvSnMOiKcz4WdC3XW+?= =?us-ascii?Q?dZOypZIW+rJ6peu3pLWJmSPphFOwYLfgxKXAZGhu9QOJ1dQyTi83Ea1yhykf?= =?us-ascii?Q?yydR23db7YzLX/hL800ak/7w+m4flk/6f2vdR2rM5RJbXr7DJRpzONxb/iPf?= =?us-ascii?Q?A31OImeGgU81pCKdUlrZVrbu56HkXC/22nqdn/B4PKlH45ExrlOkfeYpsO8w?= =?us-ascii?Q?VU9ZsButc0zk8RzLLzQFcD87F1V0q45jBItVLO5LP8LFWga3NP5mTVtvGqbt?= =?us-ascii?Q?GUkcDblRJ4QyS6H/cypfvEGk0TufyduGLiJi5SOQe/+XA/GOz0FP0Srp1yXv?= =?us-ascii?Q?I03SNsp/GIHG/YIw9kiUS3apIFA5XS6USo82XvrIL3IXqi1aOWzJCDtEnSKi?= =?us-ascii?Q?0BWRPyxpb3jw/R/w7v9J59Y1dztndKHEtM9hATfJHQAuXk+dxPv5PQ8MH7sL?= =?us-ascii?Q?GbQ0AZ6Q6ft7t3fPqKAWFqeQsXVTDflmz4d6qn0yHcwT8Fc+y9ZUDp+iDVNv?= =?us-ascii?Q?zQ=3D=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 258bb7f3-e08f-40de-c33e-08de25dcae0f X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Nov 2025 13:24:47.8700 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: GUUuMA+EInRmXBQJUKxkcsYAmi9S86x8nhShOOAOZylhsbyYo7/yVokYoEUgeWuzXzkDl+45tPxEDXEExCkYIPC8FOUS/N/OwVe+kl/mVQ0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB8044 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: /7XLDh90jMqL From: Christoph Steiger Package python libraries for SBOM generation in isar. The packages are unfortunately not (yet) packaged in Debian, thats why we need to do it here. With these libraries it is now possible to easily create CDX and SPDX SBOMs in different file formats. Signed-off-by: Christoph Steiger --- .../python3-beartype/files/rules | 8 ++++ .../python3-beartype_0.19.0.bb | 29 +++++++++++ .../files/pybuild.testfiles | 1 + .../python3-cyclonedx-lib/files/rules | 8 ++++ .../python3-cyclonedx-lib_9.1.0.bb | 48 +++++++++++++++++++ .../python3-packageurl/files/rules | 8 ++++ .../python3-packageurl_0.16.0.bb | 33 +++++++++++++ .../python3-py-serializable/files/rules | 8 ++++ .../python3-py-serializable_2.0.0.bb | 38 +++++++++++++++ .../python3-spdx-tools/files/rules | 25 ++++++++++ .../python3-spdx-tools_0.8.3.bb | 46 ++++++++++++++++++ 11 files changed, 252 insertions(+) create mode 100644 meta/recipes-support/python3-beartype/files/rules create mode 100644 meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/rules create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb create mode 100644 meta/recipes-support/python3-packageurl/files/rules create mode 100644 meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb create mode 100644 meta/recipes-support/python3-py-serializable/files/rules create mode 100644 meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb create mode 100644 meta/recipes-support/python3-spdx-tools/files/rules create mode 100644 meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb diff --git a/meta/recipes-support/python3-beartype/files/rules b/meta/recipes-support/python3-beartype/files/rules new file mode 100644 index 00000000..0ca517a1 --- /dev/null +++ b/meta/recipes-support/python3-beartype/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = beartype +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb new file mode 100644 index 00000000..b8bc2708 --- /dev/null +++ b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb @@ -0,0 +1,29 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/beartype-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), dh-python, python3-all, python3-setuptools, pybuild-plugin-pyproject, python3-hatchling" +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +# this is 01/01/1980, any earlier and zip in the wheel building process will not accept it +DEBIAN_CHANGELOG_TIMESTAMP = "315532800" +DESCRIPTION = "Unbearably fast near-real-time hybrid runtime-static type-checking in pure Python." + +SRC_URI = "\ + https://github.com/beartype/beartype/archive/refs/tags/v0.19.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e7ad00eebf527d60f30e0b391209b561dabd2074b608c50e26c94c2d8250a6cd" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles new file mode 100644 index 00000000..cc736a36 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles @@ -0,0 +1 @@ +pyproject.toml diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/rules b/meta/recipes-support/python3-cyclonedx-lib/files/rules new file mode 100644 index 00000000..fe72dd1a --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = cyclonedx-python-lib +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb new file mode 100644 index 00000000..738ed1b3 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb @@ -0,0 +1,48 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +DEPENDS:append:bookworm = " python3-packageurl python3-py-serializable" +DEPENDS:append:noble = " python3-packageurl python3-py-serializable" + +S = "${WORKDIR}/cyclonedx_python_lib-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + pybuild-plugin-pyproject, \ + python3-poetry, \ + python3-py-serializable, \ + python3-packageurl, \ + python3-sortedcontainers, \ + python3-ddt, \ + python3-defusedxml, \ + python3-license-expression, \ + python3-jsonschema, \ + python3-lxml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/CycloneDX/cyclonedx-python-lib/releases/download/v9.1.0/cyclonedx_python_lib-9.1.0.tar.gz \ + file://rules \ + file://pybuild.testfiles \ + " +SRC_URI[sha256sum] = "86935f2c88a7b47a529b93c724dbd3e903bc573f6f8bd977628a7ca1b5dadea1" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + cp "${WORKDIR}"/pybuild.testfiles "${S}"/debian + deb_debianize +} diff --git a/meta/recipes-support/python3-packageurl/files/rules b/meta/recipes-support/python3-packageurl/files/rules new file mode 100644 index 00000000..50e1b74c --- /dev/null +++ b/meta/recipes-support/python3-packageurl/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = packageurl-python +export PYBUILD_SYSTEM = distutils + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb new file mode 100644 index 00000000..27209429 --- /dev/null +++ b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb @@ -0,0 +1,33 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/packageurl_python-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "A purl aka. Package URL parser and builder" + +SRC_URI = "\ + https://github.com/package-url/packageurl-python/releases/download/v0.16.0/packageurl_python-0.16.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "69e3bf8a3932fe9c2400f56aaeb9f86911ecee2f9398dbe1b58ec34340be365d" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-py-serializable/files/rules b/meta/recipes-support/python3-py-serializable/files/rules new file mode 100644 index 00000000..0cf845dd --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = py-serializable +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb new file mode 100644 index 00000000..5bc48c0f --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb @@ -0,0 +1,38 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/py_serializable-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = " \ + dh-sequence-python3, \ + pybuild-plugin-pyproject, \ + python3-all, \ + python3-defusedxml, \ + python3-lxml, \ + python3-poetry-core, \ + python3-setuptools, \ + xmldiff, \ +" + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/madpah/serializable/releases/download/v2.0.0/py_serializable-2.0.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e9e6491dd7d29c31daf1050232b57f9657f9e8a43b867cca1ff204752cf420a5" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-spdx-tools/files/rules b/meta/recipes-support/python3-spdx-tools/files/rules new file mode 100644 index 00000000..ac87528a --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/files/rules @@ -0,0 +1,25 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = spdx-tools +export PYBUILD_SYSTEM = distutils + +# skip tests that require hard-to-package dependencies and tests that rely on relative file paths +# TODO: figure out a way to make these tests work +export PYBUILD_TEST_ARGS=--ignore tests/spdx3/validation/json_ld/test_shacl_validation.py \ + -k 'not test_examples \ + and not test_parse_from_file \ + and not test_annotation_parser \ + and not test_snippet_parser \ + and not test_creation_info_parser \ + and not test_json_ld_writer \ + and not test_extracted_licensing_info_parser \ + and not test_parse_file \ + and not test_package_parser \ + and not test_relationship_parser \ + and not test_graph_parsing_function \ + and not test_license_expression_parser \ + ' + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb new file mode 100644 index 00000000..30d090a9 --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb @@ -0,0 +1,46 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/tools-python-${PV}" + +DEPENDS:append:bookworm = " python3-beartype" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "dh-python, \ + python3-all, \ + python3-setuptools, \ + python3-beartype, \ + python3-semantic-version, \ + python3-license-expression, \ + python3-pytest , \ + python3-rdflib, \ + python3-uritools, \ + python3-ply, \ + python3-click, \ + python3-xmltodict, \ + python3-yaml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +DEB_BUILD_PROFILES += "nocheck" +DEB_BUILD_OPTIONS += "nocheck" + +DESCRIPTION = "SPDX parser and tools." + +SRC_URI = "\ + https://github.com/spdx/tools-python/archive/refs/tags/v0.8.3.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "17cb0140adbaefb58819c9d5d56060dc6a70c673a854fa9bd882ecfa4e062a7f" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} -- 2.51.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20251117132436.511686-3-felix.moessbauer%40siemens.com.