From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 06 Feb 2026 12:41:21 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-oo1-f58.google.com (mail-oo1-f58.google.com [209.85.161.58]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 616BfJUL023804 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 6 Feb 2026 12:41:20 +0100 Received: by mail-oo1-f58.google.com with SMTP id 006d021491bc7-66317aad908sf4088342eaf.3 for ; Fri, 06 Feb 2026 03:41:20 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1770378074; cv=pass; d=google.com; s=arc-20240605; b=C2nPxy1JTtQrQviswhcRHUiTrUV7rS97wGp3GL/rtwlkrtdg6M9vZAgRoHoj9ascvu kDNx9hfXhFy1/MSSsWBA6Ky9IFL/iaXkVA0Do/btemVCN953we3QQ6XgnpxofuwDI1eW /awAiN8aV4xwO6o7z3kB/RKWUzYRNYzBE0JPd8AVPbl+7ulmtRIM4oGXAMl2TrAZ+Kof H3Q5ztoKVNPJBkMUHgE+GBuJvsZdVvhvr112LwdPO22bklHjjbuGX724KMV/8YreLFgW z3tGwm0duqT28Zx8eoUIB99TizS1Ob4ywOKZk2jEz1aFcm1hu2HeEl9W2jyJ2J3atdY/ ENiw== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; fh=a6YrdkByoFqy9NOkUaDYEcbL1krcittX25h4cvq8OFs=; b=laDXr0sz+3+R38MmVg6fwWvNcWzJ81T1iubGIbpHkhiNv7jRMNF64H0pvR+Jz18xa6 ksZ55KqxF0hX7bAdFZaQatC60Le7V2zWiXUNgjSJkQQGjb22m43dLwjlYuy+o2hjqAOB ydw8I3ZAzppBZQuJjAZttRRCfmYAj/iu7hjECABFrwd3VB8HOxf5f0+u9pPAMPf4XtGs fe2CS3s21JcYnDUrxx6A/EYaNJrTHAQvnEzhtpoCGrw79yG7hAqXyBChY0bcp1maPyzW C6YEy/qlk+RMIA845BqZJJXvT9i4S6gYmUsIGEGuCiMCqacnM0SFCEmCawagtPY3jZAR FJWQ==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1770378074; x=1770982874; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; b=kdvQifsXhdd0Tm9+mDsYvVEKM6BB7HpQGwG2177MmNHyrV2il7qHbwdhb2czFo6tUz 2+s5QAXflckzLpIWQrG115yP+T0DNJvuGQZKcP4o6VguS8Lhp0xFEIm1auwBHq3UlujV VyFs4qsh1vxqgtVedMLiBZULxag4eahQSH5tydZNLvJ2F5Aa4d/Ion2Edapw9fHSQVlI yX0KmTWR8amD7QiW17LxvnR0XAuTb1Ja6NAvSfemnMke8lAe0wBzH7SOU7YaPvFTtpH7 ySvBDGNLObDrFv9oYQPFtJmjWFq3/qwRH/6iy54i7akch6VJe6muoCn6VxUUsM3jLuc5 3tEQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1770378074; x=1770982874; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=dRG9lvKJ4yyea5tIgm1mF04LnAcxnXepFEboZShm3KM=; b=En74acQc/rudy5fQ8/WTlIwuwY5ZVWM9HyaSpgbPWnOa1/jBqQFBjQYgIZiMoUj8YQ h2y6YDreDxnJ89pHFzeHO3N7HwHWFngRdlKu9i90yZukiTwrgKDvNY7lhFnWzXpiC9Uf wjCMh3kRdGWoyssuTqYDl67cIqES4B7fGEE/AAInhr+/C8hnVZ50+XDa/JSl1cxgGnWz v6UXFJDXVP1L0LSpsvt/SYus/FH1AWgjssSM7504+EsHC9RWNqOWkQMMANyiw9gfsVI3 J68r7PurCbVi5HeUz4Xy0FD7MzrSn6WZtHqV51fE6a1wX3PLuZSNwQu/QDDWgoN/1otL gfBw== X-Forwarded-Encrypted: i=3; AJvYcCUn0gbuCbmhGqJdObWKcDEuLc+puJjJ5OtgVeUKPd8C8lRjuNnlAwh5dc7t5vZGv6hZ3iVC@ilbers.de X-Gm-Message-State: AOJu0YwXxyGQCwNbE3pV1RnbdCfSz8cfRCnVVoDD6N6GY9fydcnlegjn nyq8BZn4oVJ2iOQum+ix96gvu3bX5d/YWPvOsIQaw7vnKs2Gg4Ug0Uq2 X-Received: by 2002:a05:6820:4b15:b0:664:86ce:df44 with SMTP id 006d021491bc7-66d09ac0446mr1186332eaf.11.1770378073765; Fri, 06 Feb 2026 03:41:13 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+HmaQozlOJ7Ru5L1R4Z8/QoevepnIQ84QpUlh3f9HCChg==" Received: by 2002:a05:6820:3c8:b0:66a:18b5:e23f with SMTP id 006d021491bc7-66b9a54398als879137eaf.2.-pod-prod-02-us; Fri, 06 Feb 2026 03:41:12 -0800 (PST) X-Received: by 2002:a05:6820:f010:b0:663:3cb:3f0d with SMTP id 006d021491bc7-66d0c855984mr1006151eaf.66.1770378072689; Fri, 06 Feb 2026 03:41:12 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1770378072; cv=pass; d=google.com; s=arc-20240605; b=j3LI8DDbmHJ2nkay0UL3TTkYuwJ4mYc/fOrW6aEjO0HrwBSLkMgeBVsYzrDzL6M+5q zw+gnXPj5unrwDZfWJ1GHLlRQmSAg5WQvkCYdqQMl1w/SAgMaTHPFTFUKTx07UGHHMEP EI88WNX1MMmi+oIlQ8fzgB92jWgEhltzHJxrUz4Y3AThCpaBjMAVRDML0vGMzcrSJQKm 2QoDnlVJCy8G8ynYaGTSS/fRHTI+m2+5dugAko750a0kt0Tjl9v9JV6O3Ut1DBQ3Dvqv 6oJIcD6mhGrpyzxqOGhPsMQl38S+CdLts3fHtzQnCRnqHMWPh1m0LxkI7yYnoi4e62eW XoRw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=HnVVAtuE6nYSbHsa3xEkP6O/ywR6cPRsMekx2fzlqzY=; fh=3TZ2kfKzTV0uAG2uKD8NJHxpu4kGHzyonq8tLR1Voro=; b=WeZKX11tQWXxnkQDGELevNWTFoiRqIWv+Re1QF4gy36t3daMsqb7IspwKGDKN70KlN lU2mjrB64spQYCAqFKdcyTMCv5R9iD5S7vwoRwQbmElhtCuKXIyn1kK5W6PHsz0+DkY9 bd5c5kRbOGZeHTy+bryyNmSee+CFzNn/IK7KiJPV41dqzjwY/SvIpSOy0EZP+QF6Uohl g74ElcyTc2N4n3YriBNtSLZ0fh3ynDdIvkKskKwl9Pry+G0TZ0o4tgnryXBeVE4+ZMOZ eSUSvIOKKJMN7kDniN7R1tzbxqA94INSsrYn9n6dWVo4YcUwr534T5ILzkvi+wUMIbC1 fyuQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DUZPR83CU001.outbound.protection.outlook.com (mail-northeuropeazlp170120005.outbound.protection.outlook.com. [2a01:111:f403:c200::5]) by gmr-mx.google.com with ESMTPS id 006d021491bc7-66d35f52c55si61432eaf.0.2026.02.06.03.41.12 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 06 Feb 2026 03:41:12 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) client-ip=2a01:111:f403:c200::5; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=eZO0mHf1IBlXd98oc9DidtZldrLCWC0cYXWWLZWu95mdnSsv9/B9mTBcwPTknt4hPWgIRAHsOvWVqa05O7M45ENozYAQrk9rqnAxhq8Xj4toQDmE1m2OH9/MHRquufnkXhYKW3zaQJbL4O0CG5KmvTiLvM15QhS2WSl8efGEixD4uvdI+u4DnQNmZhNDZV19NMaDPKT9pO2s1Udc05NQvhFk2N2sGqLU2w2wyQumqScRtGUzJtrdOiFce1NTdHmtj8XNXymbluwfQCS406ButMZ775OXlyuRPd6bgyjUQUcqFBc4Go3KBYQTDVvdbjAzSmPUlPep9qBC5ufeWiWtKQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=HnVVAtuE6nYSbHsa3xEkP6O/ywR6cPRsMekx2fzlqzY=; b=lZOJvTbdRoqHMFB3/TTm6CL+Kb72tDoMDaPAgUONFCKPpJUbZ7Z8C/jPvLkYn01unD8y+WFzqJKO9MS3yqNPEjri+Pq2HQR32iVNaA9e6Po8UCC5XlMhmEpZKW4e0jCqHSs9jAA2aWHjI+nxCCGNoIM3y3jtEQLL1iuwzrxNRlffXsLAsPU+H2LLx20nqb0hElgHSx2laH37y7Pt1O7sxwBXCWKtw6NZojWzSijJwxMNS6mThl85KSS+JQBjDPHZvk/1qCU9f6v3h1kzhv5kcrQQHQoZUjwKjHhPQMzNZePbJqrb9KlQVs/Meay7KQdFm6Plw1dLqrfsQFAHcMgaJQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by DB4PR10MB7039.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:3f1::11) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9587.14; Fri, 6 Feb 2026 11:41:09 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab%3]) with mapi id 15.20.9587.010; Fri, 6 Feb 2026 11:41:09 +0000 From: "'Felix Moessbauer' via isar-users" To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com, quirin.gylstorff@siemens.com, stefan-koch@siemens.com, Felix Moessbauer Subject: [PATCH v8 6/7] imager: create SBOM of IMAGER_BOM packages Date: Fri, 6 Feb 2026 12:40:53 +0100 Message-ID: <20260206114054.3010883-7-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20260206114054.3010883-1-felix.moessbauer@siemens.com> References: <20260206114054.3010883-1-felix.moessbauer@siemens.com> Content-Type: text/plain; charset="UTF-8" X-ClientProxiedBy: FR0P281CA0252.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:af::14) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|DB4PR10MB7039:EE_ X-MS-Office365-Filtering-Correlation-Id: 632cd9de-edad-471a-0561-08de65749f28 X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|1800799024|366016|10070799003|376014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?cw6YWlyG+1vNb45W25oJsmN+JAL+6Un8NfEmwRy4CS+1ARcb8Sp+bsqmT/bE?= =?us-ascii?Q?aU+vrgUyilQZb4sV5EHSRErl6Oao5keZoW46chmDmjhNlVVLYcRAbmE6q7xj?= =?us-ascii?Q?LHn8jtasi+oNXpGXfwQ6A/PBCLOgW1rqzWf0s/TXw6B9Hq21LeOEl6uRGx5q?= =?us-ascii?Q?BOvAAyMFNS5IEhUclQ5EkNw2ocnrNj8FbFYeDpZoqqMA2uWrNAC4Ra78/swm?= =?us-ascii?Q?7uYHeG5Z0XTUSHs2TP8O/C3GDyylKHxHRAAI0s155Q1qVgvs2X2okiEXyI00?= =?us-ascii?Q?4UoL1QOuonWic5dgkPWfxmapnXvko90yFFqqtD1O5Z0Jea7b8+gmONPSPmmT?= =?us-ascii?Q?+NrK5v1bx25pSZ0l7r24mVxDLjyxZtjwHtCN8QrzE9o/dxFnbnIjjyCd1f9b?= =?us-ascii?Q?1Z/rD2KQ4141JpFRDWFXedbYVkpGAHRKKv/IEQekllVhJJKl8DIu9+gn68Yl?= =?us-ascii?Q?Sjf2GkhVXdSMSo7d67EkfLSyR2Hwu6W7bw7McWUGtqAyUNJGai0VMN6A8Bw7?= =?us-ascii?Q?20WFUmkDEsPGf8B+yiAm0L3hDissgFRC/Sbm7Lj3RTRB2w4AstdSKO8CzYHF?= =?us-ascii?Q?X/fVcfUcKzUKSUNHIzZRPe0qF1yNbzEh/n9ACrCSyiTc6fpEoRvbYqdxN1nH?= =?us-ascii?Q?yExv9xSV6Ob1TqVIfr4llB9pPdJrejHk3F3w5TXwUqk6aUciJ0G3eFXwZpSK?= =?us-ascii?Q?o50mvW51DDgBDraE0oFWemJXld7s6/sy60wMMLzp3/6FFFvaGw0bi29ZQGID?= =?us-ascii?Q?ZSLjrwKuJBryc1bjbuP3+mZ3gJsdLUfA8hHnOQ/I1zXkRkKyx1po8IR5QKeQ?= =?us-ascii?Q?6epLqTjxtamsICPGz93xsUygJD4TXW8FuPiQFizdgVQFyFGvBoKuGo3z4KGw?= =?us-ascii?Q?UyXvpv5EhfJzioOomQNwYNpWvLwQZBeTYrBjXNu4a66B67VqZawNznF4oMLh?= =?us-ascii?Q?leGmiXHdFWJ84odyMUh1F4++JvtZ5S3BLgLEeXPssXgmfmBhigFAY1AFLWp4?= =?us-ascii?Q?veAeRzr6JI/PD55nBAxCZ8gasYBOlijzfaulDwoWgNbgF+tCoLB7sFnHacET?= =?us-ascii?Q?ruDhUPxDF6NHAeYzELvyYdLnP8xB+GA6Pr5Vb+UBeDjBf14l+gPGILcsnaQp?= =?us-ascii?Q?xHXFVuIhx9Vy5NAewb4lrC2y71kICysKqbpMX25eUQY5gXaoeoJN0W4Jz2uJ?= =?us-ascii?Q?s3dVSbF0u8QN82+hSE800IfNfdjz9JG3iDTgMvAtCDpac9fRzARnrMyyWtb+?= =?us-ascii?Q?XYSZBXCZSwPdbUn/ljVG8aE76C4I9A8NAaZ9c0Ndo8r7hWzN0TvtWlW0HFza?= =?us-ascii?Q?Tm0OMxaW+eLHNDoTqzxOKqkGuXlZgjpyFzhOvA3FoJ46vmu7Vk8copz3YjeH?= =?us-ascii?Q?kcJgZ7zUWC8n403CBICMxTqfpNvj1zJerEhGn8LStO6VRUDReXm2A1sR/vjM?= =?us-ascii?Q?jW+peQCFsfyS2OBKYF4ldXWGLiO01zEFQ3H5Gotl+R8mfIHC2ga1Gtit2Myq?= =?us-ascii?Q?3gUS9AEnaB6JEIOAJ9qYCBCLZmzVETgWSEmEqTu/JzG+tgT+lUPhdr8eaVFk?= =?us-ascii?Q?qCmM5I2Bg2R80IemEN4=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(10070799003)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 2 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?j/Q4Q+/1l7cpMeJw260JzmIScP/oYRtKkmvYmgmZCwYBiq/ujMrcYAzQtyGK?= =?us-ascii?Q?WeF+q78tEWSknQkO0ainCzKVc9Mtn1fiE/iM7VN0aL7JFwT8wq5+7hBD9cxz?= =?us-ascii?Q?/ID1T9o7RLmvOv4BlnvtQOMkFQCHvc/5f1vgzroh5jICV0nb+Uh3rXfT6siD?= =?us-ascii?Q?en0z3WA/KFlYnys5UxXnadSlhvMrlJScu4bJr5AQjwOoESrIa6G3BxEHM0Rw?= =?us-ascii?Q?OhiY5l+Q7bR5wc61Y9hAE+ZhUf7fRqK6ITr8RyjWlZHhnXC28xbeDZwdNoea?= =?us-ascii?Q?TAGwYugYUbFp8brY2iJXgZUn0hBWzA9i05ttyAj8XTsg6sUzWlrCyvD5T+1a?= =?us-ascii?Q?htHu7ZkTgFrot4fGhj9irubwe76HUqHNGjop7N1ReybCsup7opCViDq0sk0L?= =?us-ascii?Q?Wg0Gm3V2dML/lAAGMjkuyn7GbXVpbI1CB7uczqAhfkBLRBcGTB9MogA9kXiT?= =?us-ascii?Q?+WpVix2likfiyuv6QGtlkTOAHdIGrKHgGju4Y9L6pSPLMo/OIOu46Ks9yZu7?= =?us-ascii?Q?ua1PjdVPiLKYq2zSlu0w5NJh/5KF8ULCNh4L4rf2IaXGO7u71Qvws9ZNVYuF?= =?us-ascii?Q?Kqki40ksYOB1x/hqqbkfYbnZCOQ7YqTM4I0OYj14hpnTbjryFjdrSto+arOK?= =?us-ascii?Q?AtRo2wJwTPQgKvHg+/MPuxh4aKIrqofUz4Wk9Sur+EskUhkcydnNL9Z8kOFk?= =?us-ascii?Q?g72X4UT4Sbku2VUIquJouL64l1gGBLj32alWz8/3u+mYvVhvAbhY8F9dTfMI?= =?us-ascii?Q?KFHc/fPIlhtiQDMz6kkYvPGU6bAmz8LfDcMJqLcQ4x+WFwQymaqGxPFEOKNV?= =?us-ascii?Q?aa0RjUYBIWNmevWGRSzR12qu3dJ2/WRb1J82MVVXLfJtsQPAS8LC7Gsr8H2T?= =?us-ascii?Q?kqNkhtNg4E3g+WRQ11mRTjEXH0t60/bijDeWfpTrFqG2MEjpk2LpTI+D2JWA?= =?us-ascii?Q?gQ4qyFY2M945yPwDjMbeKvxnOcgO5xCUPhdwz3v2xhikGQo0Oxb7oNeOzQUJ?= =?us-ascii?Q?duabFlqZKKhheVlSOjubOXQ8Aq9ziyzYFvXrAWfjnUwL50vySII4CalA96BU?= =?us-ascii?Q?kE6tiu8bzR+Am0ov1Yd1i/7ahWBi6Wa1gk6KMACyfrC+GTkgAC5hY5KSuXyB?= =?us-ascii?Q?sy6je+iFaW58Y95Pbt8pYrsiw+bkNldlSfl1Jb+EJEmUYhj5uRzPZuXVkFBt?= =?us-ascii?Q?XVO20nIiX7bwJ0hmA8CIReps918JryKyw30GFj+goYutv/v+NPo9lHwU713r?= =?us-ascii?Q?xuyHQ/VCNs3VBrbfNCOmIw2RjPb9wprlq33Qc+dhHKfiAnFgTBo8DOP9hk//?= =?us-ascii?Q?FkrUY16vWdF4GkRMzFx5Rz4ajWkL2ET0cezHNO5EwWZx1WicQ5U4ZtK3gz5A?= =?us-ascii?Q?N3oDLX5DrU5zRbxhjplg5uSUqFH+6Z5a+xQYUiKAm83Uv8/aBaojDrl67Zhd?= =?us-ascii?Q?sF6bkQwbl36IO93OG5T2U2ZxioWPyBqasAN43tTpmxaCQpBA7K7rVsxY0gey?= =?us-ascii?Q?J5AdnznfP3LPly3vvIVYO8YF1L/6XnBmyHEog7uYSb1mDiZJ17DpuT39Ga7s?= =?us-ascii?Q?LDyJv82Wd2O8zgdwHx59d/b3wK6f3FLdtUDlbfUL8eKpMvyGiMPw6dTp1mJw?= =?us-ascii?Q?fPit95qP9W+gN+uT/boAFGuBZGCPN5Z/IGmLFrNeyjEp5vxYHGfK7sTe9SiV?= =?us-ascii?Q?wH9tz6h8b/OEOc/WymxGi4rXTAPMWrZq6bicQbdbZYfCmZv4q81NTQYVky31?= =?us-ascii?Q?s7uFVzJi5ggzs6WjWSIorWsSLWeYiSy9GcLzCiQl745n+0k8ECnUoI0wcrig?= X-MS-Exchange-AntiSpam-MessageData-1: prdN+cCuixeNLEbz+QPuYF58OacyQyB7tFI= X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 632cd9de-edad-471a-0561-08de65749f28 X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 Feb 2026 11:41:09.6453 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: X7DyzIfxNpE6QCK2nXpR787BXQLdpr3mS4xYiBTID0Y2TQwwPqgmWU2/HQR50fj32xN5L+8WZ4ZYlK3s+S+nQq/9kZd060WzjMAj0M9TdLg= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB4PR10MB7039 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=QyNG+X1I; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::5 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: P9qeGTFsfAsv This uses the same interface as the .manifest file, but adds the packagse to an SBOM. Signed-off-by: Felix Moessbauer --- .../image-tools-extension.bbclass | 22 +++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/meta/classes-recipe/image-tools-extension.bbclass b/meta/classes-recipe/image-tools-extension.bbclass index 2027effb..b0f25a69 100644 --- a/meta/classes-recipe/image-tools-extension.bbclass +++ b/meta/classes-recipe/image-tools-extension.bbclass @@ -73,6 +73,8 @@ EOAPT schroot -r -c ${session_id} -d / -- \ dpkg-query -W -f='${source:Package}|${source:Version}|${Package}:${Architecture}|${Version}\n' ${local_bom} > \ ${WORKDIR}/imager.manifest + + ${@bb.utils.contains('ROOTFS_FEATURES', 'generate-sbom', 'generate_imager_sbom', '', d)} fi schroot -e -c ${session_id} @@ -80,3 +82,23 @@ EOAPT remove_mounts schroot_delete_configs } + +generate_imager_sbom() { + TIMESTAMP=$(date --iso-8601=s -d @${SOURCE_DATE_EPOCH}) + sbom_document_uuid="${@d.getVar('SBOM_DOCUMENT_UUID') or generate_document_uuid(d, False)}" + bwrap \ + --unshare-user \ + --unshare-pid \ + --bind ${SBOM_CHROOT} / \ + --bind $schroot_dir /mnt/rootfs \ + --bind ${WORKDIR} /mnt/deploy-dir \ + -- debsbom -vv generate ${SBOM_DEBSBOM_TYPE_ARGS} \ + --from-pkglist -r /mnt/rootfs -o /mnt/deploy-dir/imager \ + --distro-name '${SBOM_DISTRO_NAME}-Imager' --distro-supplier '${SBOM_DISTRO_SUPPLIER}' \ + --distro-version '${SBOM_DISTRO_VERSION}' --distro-arch '${DISTRO_ARCH}' \ + --base-distro-vendor '${SBOM_BASE_DISTRO_VENDOR}' \ + --cdx-serialnumber $sbom_document_uuid \ + --spdx-namespace '${SBOM_SPDX_NAMESPACE_PREFIX}'-$sbom_document_uuid \ + --timestamp $TIMESTAMP ${SBOM_DEBSBOM_EXTRA_ARGS} \ + < ${WORKDIR}/imager.manifest +} -- 2.51.0 -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/20260206114054.3010883-7-felix.moessbauer%40siemens.com.