From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 24 Nov 2025 12:47:13 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-qt1-f185.google.com (mail-qt1-f185.google.com [209.85.160.185]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AOBlBNa030452 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 24 Nov 2025 12:47:11 +0100 Received: by mail-qt1-f185.google.com with SMTP id d75a77b69052e-4ed74e6c468sf54065891cf.3 for ; Mon, 24 Nov 2025 03:47:11 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1763984825; cv=pass; d=google.com; s=arc-20240605; b=Em5opSwttZ36e42ezpAJd0iirAbbsPcZoAC8L9ubPlEJhXAL8pAbWlSEIn72GBL+gd +Xvk6qCzduEmqfDYcT0+TUT4x6MV85FfqhKTnAnF6hZOs6WFPvgFUpOfOfkqBgxdXYOe EnIvTBYn5lwmPZWDALIDVnSlE79UUFy/MDW5sAS+vZGe98CxRDo2RYJikC22bAoU1WuA 00esq0/6JH0q+2XvseZu6tsmVJvZ2dH7XJXA3E1Hj+LJi9dMoh7/ghzHVK47BMPoz77Z tzZquKZbkGr/mnKn7c4Yn1IV8iv1K7r6uvj+Y5WgYjA+J6PXK2dhvNWc9PYdbb3/Sb8p dMcw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=6QUpsenY/8G1XCJvndgDFd5O1YRWO1/DMTS4ndnlWKM=; fh=/vWaXWU9thnuxdcRo14q/3CfyU4mPgW+oGdSisktPB8=; b=eAI8icZRu6270Z5EGRf+Tk8d4Pq6L3UWDXHnL97J07x0gJ/spkMJ9LyeKW1oDwe5RZ H47TE5alNE+UEkFYFpXf73V48Uh4XsozxKLPihPOfox7CrwiIZTBpWHvo3AipsgLHk78 r87aRWR9B+tTviuYUjbIUAEz5RiOO0HWDoo1uYNq76PQgIMINjmkTHaqaPowQK5sjVuY 3Kjp2LJaTm/lC8KkBFKvgpnwm7oTvFVzeSEluDiPYdCPFzyaoY0aw5KXS0kCcrlAfRfa dYUoICygGw0WnHshCqyPwpIZhhOVzdBGpQQRxC7mlDCI1oQlwU36I7LdyT3VTXce5oEq sgjw==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QEEPUHel; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763984825; x=1764589625; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=6QUpsenY/8G1XCJvndgDFd5O1YRWO1/DMTS4ndnlWKM=; b=aakJWZSNXQV6Tr5yxA8m0EXGMc0H6VE4JDNsZ/HtaiNyEwqDXYhdWeGOlKUf+2FpkZ pEszCucXk8gujuPbCPq6KQALFX3izc/DxKu2lDU/jY1wT8ujlD81YU1AxQb5qirSPLlf ORevNyzaKoGsBQBSd80Q+nrkq5LOdQzPTM4YbkYUh+a6ItKLgV+n9u2rKOT46YFiEZMx aFfCblCw9v34AvFuHn5oUOv+9GZQF6AlO2BG9VKwM6/fl28LPpCspubzPUE9vHWK19Dj Tdnah6RjZleJLIaXAqmF1HrbjbT7WmoCJhTlwVh5W6fCWAkBHg7jyMOmOvZ7i4nXYEu9 CcDw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763984825; x=1764589625; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=6QUpsenY/8G1XCJvndgDFd5O1YRWO1/DMTS4ndnlWKM=; b=P5+lAAPajxZRaVJT8rgYpUS/sUzpzBKc48k53MManb/u+dxwpl85xgqe9kGvGwQOT6 1tEEhueegr2cN53EWhKTaLoXeZ6VZFoavBSlouE/VeOsqetAWoGi1LXarOIBLg27jyiV W9BF4lySMdk30rfQ9uZZlwT4BDeENZtdpL/Yh+7jIdMTy10y0UF+nIf2GwNcmnNdOBSP 6syoY8hQ15C+2NU5AV+Gh/Il6CduBLqfWrCrgD28UN+5ssO84VPesKViYJ5q/5HpGspu Eyf/UMgqYiG1GWMy21fahnfc7Kf8BXUXnTJsbiwLSoZOlyDG32MkPm0EGEfFWiH82HZ+ 0DzQ== X-Forwarded-Encrypted: i=3; AJvYcCVNZGJ/vYFdbqU6i+Dgp9cBuiM1L8/OqBpIw/nAQruB/sT18oeJcjeztL697l8+BRuNT3Yl@ilbers.de X-Gm-Message-State: AOJu0Yzby/2GnkojMDDsY4CZ3zu8H158OKUiLKs2UiCqjJcBRHKPejqc PtjpXakyxsyYf9PYxeRr//ZrhQS8d6pPQiHkq/lyqRYMLkLjJhPLfO0/ X-Google-Smtp-Source: AGHT+IEy5eR2JERZVgAWtn8dIYUdD1pjTKxUq7YbyVC1pSzlo155dJQ+5PEPMVDzagA0HdSexAM7cQ== X-Received: by 2002:ac8:5908:0:b0:4ee:4a1a:8242 with SMTP id d75a77b69052e-4ee5893cf54mr157187871cf.73.1763984825023; Mon, 24 Nov 2025 03:47:05 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+ZMYIrAog0OPlyNhtDkBTV7vEpE54GvMBfg9jW1xHkj5A==" Received: by 2002:ac8:5d04:0:b0:4ee:1b36:aec4 with SMTP id d75a77b69052e-4ee48fab8a3ls83538991cf.0.-pod-prod-08-us; Mon, 24 Nov 2025 03:47:04 -0800 (PST) X-Received: by 2002:a05:620a:29c9:b0:8b2:271e:a560 with SMTP id af79cd13be357-8b33d476f5fmr1138218685a.72.1763984823932; Mon, 24 Nov 2025 03:47:03 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763984823; cv=pass; d=google.com; s=arc-20240605; b=lb8e6d0I58ABHYe9YP5eIuiqhI3/KKillOxdFib3JNCoXfnq8KO1RBbGthyImFHEik hL82nM1MR9zxySE6QMuy9UVL3qyiol69jYqDSuDIIrLdFLpjeBv2gqfR5frJg3e56KZQ Byo7nEIDW51skbdgBT4MoeZ2QmQBF+wH4cFpKrV2NUaIL+DubEuld2zyYhJPNngm2jio JtFLbpMIdaSC1q5MDInBxdx99PYUDshwPidLpGdVWI/496XdRMklbIOZgD87aKvB2Gta BTHe9iXIrHmcdRNr+moFP0G805GYJ8pBOQL4O8/phmULRivMgY5ubvfs31nuQ9ymoI7K rmXQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; fh=lXAfkm/bqUuMyEbZqDnRxjs+8+ouAkuxpMTPCNkgt6k=; b=B5zkYG12tS/MEgJGghVpKoRasXbLNIxigRsRubh+bxAo2TW8j3uO3JSf+MRTad0ylX LilgdVUycZxXKanJ6TiwAoleqNbbEO6bRGXO7b19qEQjZ6xF6swGmSU8nTNJdkJUeH17 doI5K63EJV/872xP6PAPvyimDOForjXfg2j/x46IPqJL1XNB8VHESUgWIM/iq9fY5A9D JcQ/gHKIz0rOyOyxSr19p7U28xMjLiqcRLFqGeuCACamDeWkzv+IViJGBhJg2bcHaocA UpyIRNeJoyLhRa8tO7uEo0OiYc/BmkQtbc3r2iywasygoCE3I4RX6RUJvL44X8GXepXl r9UQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QEEPUHel; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7]) by gmr-mx.google.com with ESMTPS id af79cd13be357-8b327e874c4si44962285a.0.2025.11.24.03.47.03 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 24 Nov 2025 03:47:03 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=B/x+e+GwIHdc/muFhKkBAqqGX8lwo3BDRkyonbVOitgdGXSmUga+g6xlEmil7cBMu2LMNBq9uYnqjiX+EjyvNGbxdHd+BeXdDCLUVV4kLkAGngA8suWXoIzr8UZnWnEPL9YCbimLxYSshwZHtRKfbBbQP/muw2WZ7M+z2KmfXpINRfNulFJx8Dvkjg1AymAavhktTYZxKv4ALx0adGKk9sRvEUsaSO//IZFIOc9u9a6chF3Pa/Dbt/mCrYt6sy0y8/RMaCTHnjV5tlsj4blLzc7RIMy/z7ScDztDiUOk76m3nYXoIqpYInCNe0cfyU4lZ+T85NNemZy4JNRY1iiz6g== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; b=FlEwh1BDyII/k+gyys0jqenaIkDGehNResmm5OKC989uPcccO/oNz+qu/vR+lddbY4K6jD+sxznNAoTciWTo9r3X/2kvZ7umxgIxEIv+CKaKLvgrBAB0+2zBxzoKGcXN8OzPGXOlAbTxgdlOTDyAqkYkVRQLYp1bfJK/itUnVsPbyqSBekwfRa9RIvsOnWRfNxmj2AsXHhT8cQaspSoYVdXxSAdwwsWLINZA6h3mNkZgkTkG0hATmeeDvNRoLdVhXPNuFCcq8irEhLR9IAZZ/8eDIjruLQ1ryPhKqAAgRip5OONOVzrSX0UojCS5BxjaSUabnO02Q80C5+XiJ8il9w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PA2PR10MB9116.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:41e::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9343.17; Mon, 24 Nov 2025 11:47:01 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%4]) with mapi id 15.20.9343.016; Mon, 24 Nov 2025 11:47:01 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com, quirin.gylstorff@siemens.com Subject: [PATCH v5 02/10] meta: package python libraries for SBOM generation Date: Mon, 24 Nov 2025 12:46:30 +0100 Message-ID: <20251124114638.2238090-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20251124114638.2238090-1-felix.moessbauer@siemens.com> References: <20251124114638.2238090-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: SG2PR04CA0182.apcprd04.prod.outlook.com (2603:1096:4:14::20) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|PA2PR10MB9116:EE_ X-MS-Office365-Filtering-Correlation-Id: 7447ee65-5528-433e-f353-08de2b4f2e49 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|376014|1800799024; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?QUYPuY7u7BAv9SZE4E5M29IZyqvV/8BMGmrdqKavlIAuuhzMr9GHPkKx6Cb0?= =?us-ascii?Q?FNcwhKOCV7cnroRYy0rbu3/P6nPtRABJYeazWtAHXWsCSiTRBnOhG3IPjjAe?= =?us-ascii?Q?+emuV27tr58vI5GBU1H+efj3zCQhf3rOOna4m9AEWGdMTe4HXAdR+Uw01kYN?= =?us-ascii?Q?SQIhE31JAbeRt074JkT8tK0SHV9WpNu8LspMrEnlLlsqknyfzqXW3DvUefb3?= =?us-ascii?Q?TQoaoY0D5Fk2Fa0Uqh6FOmoF4x5wBPARim/KdLlswyOUpwVdvzoKCvvW2HNT?= =?us-ascii?Q?gSaz3+C+7vgNgBgz3KggMwM0wP66583tIUfctgTmX9rG2Os11jSv6I7OlyMW?= =?us-ascii?Q?Y16WQ3ojoFqZKuCo3lyeIJX0W5VRg9aSfw+fNZ9fi79NJl0xUDtktt6e6ix0?= =?us-ascii?Q?vey4DEpQfR+LG4ItwcJtonH3fWtwHpfOeMYmpX92qXkNRb93wAUf6A9wef14?= =?us-ascii?Q?K7RzDgbyHt2jWVIHmXmthiKs9oaqzGK2mFcJR+4F7sp0CYSKxDJU42RiX4dl?= =?us-ascii?Q?RUBucli5pDp2NLe2NUItVUb1HK6UeQXZhxY5szPpy+5R3eg4b75VNRVpFLcF?= =?us-ascii?Q?P6VacyGd/e5PQCipmqZqxOOYAlQj9puJkha2iLwrz48uFs+bKPJqBmPSotAE?= =?us-ascii?Q?wJGTpX+tCQEsof8yMF92f7wTzHJNnv72LNhB2he9o2MJbGXthPI/6j9Q5q/M?= =?us-ascii?Q?YDGHUzVdH3aYlf+w0bMPgr5s7EY6bWuJDoUdUuyneelvLw3/5GD4/6IR6/v/?= =?us-ascii?Q?kc4mMdqnsPUlyGLssM9+AhHVgxyX/ASwQvfaSngkO2VmlYCPlj5PiuKwbv4/?= =?us-ascii?Q?OuYEEYj1ZPcJKIRk34jE/T48hlmCJppNpNHMkmM4Q/omQsDFk1dTRW1o3elu?= =?us-ascii?Q?3WdBnMQ5TFcWoq2EiLc5L8WBYmTm4ifZjZyO+QBAJM4J5ieSg6visgeQX7ws?= =?us-ascii?Q?UaeL2cQB0BW0agCPa/UdGaNPn8Ku/y7ZrnNjqJf9WNzqqu0mmI6k3JonSAg6?= =?us-ascii?Q?yrxMpr9CZiYXD3r03IYzn+f+02ceYnZD5dPpIwEG3qzzljICisKQG74EJWLF?= =?us-ascii?Q?tZwOX4d2UCKTssqnf9maxpSOArRJIWpaL8MqqtVOKPVhuu42XI12LgkBsL7P?= =?us-ascii?Q?EDg6Sta0WEklCRUDzIsDB2yc7vDJ0PcQ+FKyafJUtWHG72MkxV9Fqqmrc5BW?= =?us-ascii?Q?o2FXaCYs2jHc7MFvACOAlVHtstz9VnDwYgvUJeIxJlv0GTNxkzKSNimN7QeN?= =?us-ascii?Q?vog8KhtZEH05KyGxe2Baom0uQiMEbSlQy/EWodyuax84GgE8fiCDAyla1T4v?= =?us-ascii?Q?eYK/8ZmZzY1MKhkd6Kezj7qn4FpjPzsybIQq15KvCVvOzUhqPQGgeXq8JtnR?= =?us-ascii?Q?tmcw+sWGniq1U0iyYKG9aF28kS4GjoGF/q3FXZEY8MEy9/V1RDWSv2LJmk4d?= =?us-ascii?Q?hESWP9Klipb9091ugzdpllxFAToLy6kcuOmAG8NnDCr/fC5M1kcvaA=3D=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Vvu7YQY/28sRbJ1nLd57ZCSMfThxy9a5mdGoUzKN127aUBFCNJLvceDAB2q4?= =?us-ascii?Q?wazAU8lRLuVQ0kzA5NZXaUYCs3iLdRQt/QN98MUPW/n6mTHz7+2akHPyMSKV?= =?us-ascii?Q?z+w2SHxy4zjUrCKMjM//6xydd8BcoKztpOpEVR4Yu6XnKdx9lctFD1H4Q2nS?= =?us-ascii?Q?Y1ajfHMnkncXaGPFnluuBkNOPXDU3DcRpQPusTNRtG3Oy3sY43G4Wyhext3v?= =?us-ascii?Q?s/n9/+Z3Ssjsv0ZfZGUzfl8+erM1MZWVRGX0QijqWUMAacc9iKLywuCbwQKQ?= =?us-ascii?Q?vx/6hMb/bTuSX7B+UmHCzdAN4zNKWsGOsgOqsSr+fu/0qX7rXdIod837Uj++?= =?us-ascii?Q?Xnuye0gW+lH2fqo6YyVSZrSOoJfR7Jbdn8VPAKjtKXKUqsTT6KMg/2NN97tO?= =?us-ascii?Q?0BsnuVWrNcjU369Xyr7aQzCKRmqGQD4PuC3E5S+8mzS4nh3XtO5f1l7/E3kS?= =?us-ascii?Q?00Wz8ZNty2ok9ra53DGDYlLjDCATVhY8TkvYFofq+yCBfWsv3rZApW60DH45?= =?us-ascii?Q?MUxWkI4OXsH8Gkzhd0yBM546rqDagWZApYLHUmiaD4QDVWNoAPvcIdnkOVS5?= =?us-ascii?Q?LbW3/OyHWhXJZQl2eNGCC889BE1xGVGOfvk4u9LNPDM44euOiE+G6RdGb7AY?= =?us-ascii?Q?b4iaDhurvgCwNEfqFKGT4ZOukOtZtQKUX3Tm1FvhroP4Ey6FwNGsfVIXs0Ed?= =?us-ascii?Q?9/8qoWSOz0Ks6oL6nhFCreOmGgLr6It9E+LcCEdVUlMpR9sGo+z/lTlKTI5O?= =?us-ascii?Q?YSi6p4amun4dqFKA73c7uhVApyPdz4dOjgX1vrDO0X2gC21Pf4xKTUDFW1XK?= =?us-ascii?Q?2pLyaQ5jdpJmqCNijO4qdA6LCpXgSZELc40vjKoGaIpKFt/N1+Caj+5X27Rn?= =?us-ascii?Q?EInEq0fLISDUC/T7c7GmmuU43K8TjO35bA2HW6T4DWkde08g94L+8DkTZcBb?= =?us-ascii?Q?Acd+LxpxZiDYWv6Xn3eLr38G8saTDKo6aLaHk/fL9yfstWLlla8dClVGk/Dv?= =?us-ascii?Q?HY9WN3noEHUaQyYMPBGGLY5d5//E/QZJL2F/hPmDxb/VmZd+328sdjYwfoQn?= =?us-ascii?Q?JXDWmudPzj3H8cGk2VmdUi7+YFGaoZNsWrg8IDlfupiMTzwACkHkt6e+2Yvl?= =?us-ascii?Q?khu6vksB8wh7cudweow6x+dBVZONmyb759WaSSE/art0J3zOsJN0m/K+vO0c?= =?us-ascii?Q?GhMS0ufwmEngc91q3sRSZGPdOphjhCiZpzVbPYHXP3nPmHoHAF/x7Bkb3Pta?= =?us-ascii?Q?PcPbe1YEQh4m0CNzpVwvqa2b+shgtR/58/yJoawMi52H7+e+yTjw8RzPtsOo?= =?us-ascii?Q?n37/iQ7b4NBw0betM3+520PC5pu4CTOVSPoT3NWPkbU4uHGqp1DB6C8Mklxj?= =?us-ascii?Q?IH6f3ruWZ8SX24ulNBvIWxGeiU/54G5nuoxu7W2zOYPZxKNr9TtLDS13tyvu?= =?us-ascii?Q?vAYdEyNBxvzA8Muk3WSBMQaG3owWBCeOfTH951F9wGmv1BKc4uHU+OjM0efM?= =?us-ascii?Q?MQUkuWkETr0+GKqLE4xMwj/71PVbaUsd+cr8HDHRIG6GbvNw5fGw7jxhcBAL?= =?us-ascii?Q?JfmYkGhRR+P9eZ57emx4L4OeeSzFCvJsqNTv9mNwVH2s80XJYTAbRiYJ7utI?= =?us-ascii?Q?3Q=3D=3D?= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 7447ee65-5528-433e-f353-08de2b4f2e49 X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Nov 2025 11:47:01.7307 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: SaQm6jN074J1bnYILaueqPCZhqdpfTtuZZy4AFuzaeW1OCck6Diu9vwvgTSJEt7Db82k1ethaA7NhYg5YId0jnQQKvukPqFukpUl64K3eL4= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PA2PR10MB9116 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QEEPUHel; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: BeSwz5FK9BNH From: Christoph Steiger Package python libraries for SBOM generation in isar. The packages are unfortunately not (yet) packaged in Debian, thats why we need to do it here. With these libraries it is now possible to easily create CDX and SPDX SBOMs in different file formats. Signed-off-by: Christoph Steiger --- .../python3-beartype/files/rules | 8 ++++ .../python3-beartype_0.19.0.bb | 29 +++++++++++ .../files/pybuild.testfiles | 1 + .../python3-cyclonedx-lib/files/rules | 8 ++++ .../python3-cyclonedx-lib_9.1.0.bb | 48 +++++++++++++++++++ .../python3-packageurl/files/rules | 8 ++++ .../python3-packageurl_0.16.0.bb | 33 +++++++++++++ .../python3-py-serializable/files/rules | 8 ++++ .../python3-py-serializable_2.0.0.bb | 38 +++++++++++++++ .../python3-spdx-tools/files/rules | 25 ++++++++++ .../python3-spdx-tools_0.8.3.bb | 46 ++++++++++++++++++ 11 files changed, 252 insertions(+) create mode 100644 meta/recipes-support/python3-beartype/files/rules create mode 100644 meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/rules create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb create mode 100644 meta/recipes-support/python3-packageurl/files/rules create mode 100644 meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb create mode 100644 meta/recipes-support/python3-py-serializable/files/rules create mode 100644 meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb create mode 100644 meta/recipes-support/python3-spdx-tools/files/rules create mode 100644 meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb diff --git a/meta/recipes-support/python3-beartype/files/rules b/meta/recipes-support/python3-beartype/files/rules new file mode 100644 index 00000000..0ca517a1 --- /dev/null +++ b/meta/recipes-support/python3-beartype/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = beartype +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb new file mode 100644 index 00000000..b8bc2708 --- /dev/null +++ b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb @@ -0,0 +1,29 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/beartype-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), dh-python, python3-all, python3-setuptools, pybuild-plugin-pyproject, python3-hatchling" +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +# this is 01/01/1980, any earlier and zip in the wheel building process will not accept it +DEBIAN_CHANGELOG_TIMESTAMP = "315532800" +DESCRIPTION = "Unbearably fast near-real-time hybrid runtime-static type-checking in pure Python." + +SRC_URI = "\ + https://github.com/beartype/beartype/archive/refs/tags/v0.19.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e7ad00eebf527d60f30e0b391209b561dabd2074b608c50e26c94c2d8250a6cd" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles new file mode 100644 index 00000000..cc736a36 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles @@ -0,0 +1 @@ +pyproject.toml diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/rules b/meta/recipes-support/python3-cyclonedx-lib/files/rules new file mode 100644 index 00000000..fe72dd1a --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = cyclonedx-python-lib +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb new file mode 100644 index 00000000..738ed1b3 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb @@ -0,0 +1,48 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +DEPENDS:append:bookworm = " python3-packageurl python3-py-serializable" +DEPENDS:append:noble = " python3-packageurl python3-py-serializable" + +S = "${WORKDIR}/cyclonedx_python_lib-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + pybuild-plugin-pyproject, \ + python3-poetry, \ + python3-py-serializable, \ + python3-packageurl, \ + python3-sortedcontainers, \ + python3-ddt, \ + python3-defusedxml, \ + python3-license-expression, \ + python3-jsonschema, \ + python3-lxml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/CycloneDX/cyclonedx-python-lib/releases/download/v9.1.0/cyclonedx_python_lib-9.1.0.tar.gz \ + file://rules \ + file://pybuild.testfiles \ + " +SRC_URI[sha256sum] = "86935f2c88a7b47a529b93c724dbd3e903bc573f6f8bd977628a7ca1b5dadea1" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + cp "${WORKDIR}"/pybuild.testfiles "${S}"/debian + deb_debianize +} diff --git a/meta/recipes-support/python3-packageurl/files/rules b/meta/recipes-support/python3-packageurl/files/rules new file mode 100644 index 00000000..50e1b74c --- /dev/null +++ b/meta/recipes-support/python3-packageurl/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = packageurl-python +export PYBUILD_SYSTEM = distutils + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb new file mode 100644 index 00000000..27209429 --- /dev/null +++ b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb @@ -0,0 +1,33 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/packageurl_python-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "A purl aka. Package URL parser and builder" + +SRC_URI = "\ + https://github.com/package-url/packageurl-python/releases/download/v0.16.0/packageurl_python-0.16.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "69e3bf8a3932fe9c2400f56aaeb9f86911ecee2f9398dbe1b58ec34340be365d" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-py-serializable/files/rules b/meta/recipes-support/python3-py-serializable/files/rules new file mode 100644 index 00000000..0cf845dd --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = py-serializable +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb new file mode 100644 index 00000000..5bc48c0f --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb @@ -0,0 +1,38 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/py_serializable-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = " \ + dh-sequence-python3, \ + pybuild-plugin-pyproject, \ + python3-all, \ + python3-defusedxml, \ + python3-lxml, \ + python3-poetry-core, \ + python3-setuptools, \ + xmldiff, \ +" + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/madpah/serializable/releases/download/v2.0.0/py_serializable-2.0.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e9e6491dd7d29c31daf1050232b57f9657f9e8a43b867cca1ff204752cf420a5" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-spdx-tools/files/rules b/meta/recipes-support/python3-spdx-tools/files/rules new file mode 100644 index 00000000..ac87528a --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/files/rules @@ -0,0 +1,25 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = spdx-tools +export PYBUILD_SYSTEM = distutils + +# skip tests that require hard-to-package dependencies and tests that rely on relative file paths +# TODO: figure out a way to make these tests work +export PYBUILD_TEST_ARGS=--ignore tests/spdx3/validation/json_ld/test_shacl_validation.py \ + -k 'not test_examples \ + and not test_parse_from_file \ + and not test_annotation_parser \ + and not test_snippet_parser \ + and not test_creation_info_parser \ + and not test_json_ld_writer \ + and not test_extracted_licensing_info_parser \ + and not test_parse_file \ + and not test_package_parser \ + and not test_relationship_parser \ + and not test_graph_parsing_function \ + and not test_license_expression_parser \ + ' + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb new file mode 100644 index 00000000..30d090a9 --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb @@ -0,0 +1,46 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/tools-python-${PV}" + +DEPENDS:append:bookworm = " python3-beartype" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "dh-python, \ + python3-all, \ + python3-setuptools, \ + python3-beartype, \ + python3-semantic-version, \ + python3-license-expression, \ + python3-pytest , \ + python3-rdflib, \ + python3-uritools, \ + python3-ply, \ + python3-click, \ + python3-xmltodict, \ + python3-yaml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +DEB_BUILD_PROFILES += "nocheck" +DEB_BUILD_OPTIONS += "nocheck" + +DESCRIPTION = "SPDX parser and tools." + +SRC_URI = "\ + https://github.com/spdx/tools-python/archive/refs/tags/v0.8.3.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "17cb0140adbaefb58819c9d5d56060dc6a70c673a854fa9bd882ecfa4e062a7f" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} -- 2.51.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20251124114638.2238090-3-felix.moessbauer%40siemens.com.