From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 28 Nov 2025 15:35:58 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f63.google.com (mail-pj1-f63.google.com [209.85.216.63]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5ASEZuf8027602 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 28 Nov 2025 15:35:57 +0100 Received: by mail-pj1-f63.google.com with SMTP id 98e67ed59e1d1-343e262230esf2013776a91.2 for ; Fri, 28 Nov 2025 06:35:57 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1764340550; cv=pass; d=google.com; s=arc-20240605; b=AmxKoCz64p7wVXBBszTT359muu7ksBsddXSXZqd8YVCzn54Q61ajzZBXyzi4nOymyI MUn2D3KTkKoXj+gLeGWsaVJVq5QSml6c9iu3Kq/juWcwwMEy57LPN2iCI1eV/rGJ0mA4 d+XyOF6JGvW16CHNxxgic7Pe4UYHEulDWppwe8XPRk9+vRqTKFLaIXfyClNQEXMlJ9Uy vv2iJag5NbzDFe1dN6SP64Yw18pS4G4aUJagO1vZjseWZMQ3sKMYP621iZPt/DJ/DYQo JLUJzbqL0/kWQ8Kfz7CfaZZqzL4o5dsYI/4+79Q529OqUA+b1Nn4R74RmUz5z3nEYbwB +vIQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:content-id :user-agent:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :dkim-signature; bh=Y53VqjJIg/v7Ln5lVzzQK1hyBpJYz1qkISUPxV/GlwE=; fh=wrNqxnPrCXkkiYoeuRGZmJ0J0nJeNEA9bJsfJ2zwsrI=; b=IyjwSx1PSu70BuIMQCtABEwRUzqCNUiUaVz1bwjBRh7XyCXGwV3J+XOnybkWb+o0A9 o/R4JuoJu6lGyyrabqYwGVnPBGZ/sJvnPeeCSXKYUtdJDHuBgVOtqHn11/Woc/HOsOzr 0botvRp7ihsiGTVpovFSR3w6DMQTjXGz/9MCc9kLWGZBwm2+2X9daz/EHipPEU3q2eRF ZAt9xAPmvZCg4PuOn5JdtNgwy5R7UMpZNI+oejyJ+abBh1M+uheMPCdPR0PYTuOkN048 8mmUcf9EKk9ICVZbi64sTM8CWv+A2E1HkbaYJB5yL25dLZ4XaOr+///yRlQ2jdnZSgFS Zc4A==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="XmjE/h26"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of cedric.hombourger@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=cedric.hombourger@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1764340550; x=1764945350; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:from:to:cc:subject:date:message-id:reply-to; bh=Y53VqjJIg/v7Ln5lVzzQK1hyBpJYz1qkISUPxV/GlwE=; b=Nvo2tmfBltT/QhUHqsMzm0L9ziD4A5MDAcnrOByiwkX3JYJ+ve1dra0MhDdaDPmG+t vIntzwiq1VPcLx2ttluLfcDzB85Nm0Zn+EXbyf7eczwZ7V2WBQOtCXEl7JvOLsX2hkrN 8RGoVw8wW0p0wzEC2YV+i/rInzLNcCVmdj/pRGYFCzyyg5i68smWINOWKJSxpDhSL9Ou n6YOYnFnrZ1EXNDvQ5KVhVmxy7wJbRXcjA3gviGHICPexmSBKi8UqR8SU8OBW+lqOdZZ K4LwWLpQJDwfjZmT7WzKQXiCy+Kgfu6Hb4i2h4ngP2hI+Q9nEWNULPGWaZ2n3yFmBmG/ Obew== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1764340550; x=1764945350; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-id:user-agent:content-language:accept-language:in-reply-to :references:message-id:date:thread-index:thread-topic:subject:cc:to :from:x-beenthere:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=Y53VqjJIg/v7Ln5lVzzQK1hyBpJYz1qkISUPxV/GlwE=; b=eapX4Maa541bMNjK+6+T4et0ge9y+V0vvzwkCmjKhGL9zBfqfORAk3OnJ0oN5XZtSf wv/aYG5i3swzR7o2cy5QyDBwtqHRjTmJ209+VZH6ghPuX5ys1uPW4gJS8giHkZuq+xzz dNSsid3JDp4aU4aZfVdGeLBKDmbMNVPIA5ap7zCXXqWgVz0vrAw38F/n1Qm37ZMD+E9E oVKPqSaEcpds0iv+6hk9QqHMVBQ80g98YCOWRCJdr7rU/pZ5r0jPHDhX9Or+Yhq0s6WU XNF79znfRfogdiNMw5UIGAgby5l2cfx10K+2LWGvKGMT4Heam5pcbv3Dq3oVQETBICgq HCyQ== X-Forwarded-Encrypted: i=3; AJvYcCWua6lGuI714qLcB5OtR9HCSqM+f/HTw8+CzWQrnhDJzptcxnl5OGpA/SiwbPp8J/navjWE@ilbers.de X-Gm-Message-State: AOJu0YwyUvJTV/KpLtqAt3N70AVEl6gFu/2Iv/BNs6u+aHA7cl9CViIi e7FqEjFh94YZJcCEb8p5KGW4VSrAkuoOBRMgDbxJeM+XOYzFhUDGg0Yx X-Google-Smtp-Source: AGHT+IGwCpWJSg22PYTeRvaxF+oeBHTzjQIxmmQOZAKlzPWi01whwhzG7YNcvNvEgnlDWuqtpMqoBA== X-Received: by 2002:a17:90b:1f82:b0:340:a19f:c25b with SMTP id 98e67ed59e1d1-3475ed50999mr16432715a91.24.1764340550195; Fri, 28 Nov 2025 06:35:50 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+ZF9xXwhXWYCPBgJkPLDrHiKoBkbV7ITTFQpBTthLKVYw==" Received: by 2002:a17:90a:fc4d:b0:347:8521:c3be with SMTP id 98e67ed59e1d1-3478521c510ls569927a91.1.-pod-prod-09-us; Fri, 28 Nov 2025 06:35:48 -0800 (PST) X-Received: by 2002:a17:90b:4b52:b0:330:7ff5:2c58 with SMTP id 98e67ed59e1d1-3475ebe7422mr16424559a91.7.1764340548445; Fri, 28 Nov 2025 06:35:48 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1764340548; cv=pass; d=google.com; s=arc-20240605; b=Szpb7ODaiGqhuKDF07dYr5nobCfw589P7+fPOKpeiAd8X0ttEXOZDlVvgzYOGXWWMm hVG14Kicpx4vMKouXZXok4mBnIxy8eiHKClMqUA40C+pZCyqto0wqtITQV4PxkZBy+zN 7ocuulVQRF+DHbFza6eAO+cM9x+O3GpKiWDjjy+LnXO7F1Lieznmap4og/W+ESySUs+T 58nmvSn5PHPvlROn1JOAPArmmaoAj2+/2AeAoheVIz8t2PJyWtA/wtLfN+SIzM6beRmD rygY5Ei7+RsM9AXs4EHnVfceO84x45WtO97Sf/0wWTMD8KnPMAolcSqHCjN/dc25sc7p 60lg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=xSdFQ3dl6FMKAFuc3gtKcV5Ndyniub+5m6T98KyCj4U=; fh=OE2InVShL+7UO6LqX/tfrupp/T8JpuXZWUUr+BxmH4o=; b=b/8oaIyZ+DttEX0pHL2BfWZQf63jgVEJ6O+laWnclio4D9QRdLvk8Kra3AiqlM0ROW jDJ8HqC0M/P+QaWv6Te/bhnhQZLL/5B+/uyYgs6eQgwAbA1lyNLlIbTKVCcPXSxQU9m0 EuK3bU3ytiJFmmSIJB0pFpc9+Mh369+UFaH+P00W4ZK/WbMAOBCynT6m8SkOBrrxWqJo 9ZA1EGb6IH9WKmBO61aWWIazTOl7kAcETf7cHmrT8LZq0F++4+J9zCu0EmSQICy3TQrw D0VQhyFfkLaFcByFwC3S0NkLAS/klcb9VCdXUB1T0DKHomD1B7RDg6FePmm25lhMkewm 4Mig==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="XmjE/h26"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of cedric.hombourger@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=cedric.hombourger@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id d2e1a72fcca58-7d15e9c3d9dsi170071b3a.8.2025.11.28.06.35.48 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 28 Nov 2025 06:35:48 -0800 (PST) Received-SPF: pass (google.com: domain of cedric.hombourger@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=ZCTP/9RFqIbz4gQ/wGwDT9JOCSV5paUwotsFCX8FBpDnYw8X2WfJgcvRRfvE4QUVdQel8EfpUbOQpreZwAxDY2kxhGdR0G0UOzQk2XaSPZJvK1hBN5Gw9se3g2OjbIXSxItMftZWkDZBNPI9UUxwAEQoPDIIbVoGDxB+QMiBlLc0olMz/97tX6CjokpF0tdFtCk7xpODHuQ7Pg+L+zEvIxjsMvDX3uMyYB2fzaeCTrR9P5367RXgy5IRv4TCvtayKFcCsAVmD51cOutChy9HLSAcBAfCPBGCWTHwgg3XOdYulhKpfbyNrag+OsvNNntGRAyAkkOXO0T1a6oYlCviJg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xSdFQ3dl6FMKAFuc3gtKcV5Ndyniub+5m6T98KyCj4U=; b=DMXIw6IXQ84bH8y416Is1aZDlCooLiENzalTmpsaLSF9ZtrLpsQS6uEZC7tAjlZBHsNQ9TG9CCdNXr31eJLWAFxHZMZsO4OsQBKrI5pjWwuYEnC5WjfUcogY3QZaGHLOODFPy0UWHzGdellsaiOwN+zWrRFqPX+Q20xbXuROB34O4FBoSXsKvxftl0rTqybSP0FLjRb8jsOZtns9LwsSvLcrrIlsVn0ZrFVTxq16k+2IdnUwt4juHa2FlGAX9FO5fd0d9OvZtBqjuQa2URL9KgMwP0ChRt/W2DwEhnO7SSCsevfjIseji0ToyJsIUO7uQRwaV3SRFTgKzTyMEsE7qA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS8PR10MB7875.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:629::5) by PR3PR10MB4109.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:a0::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9366.16; Fri, 28 Nov 2025 14:35:45 +0000 Received: from AS8PR10MB7875.EURPRD10.PROD.OUTLOOK.COM ([fe80::b0ad:e93d:d30d:b90]) by AS8PR10MB7875.EURPRD10.PROD.OUTLOOK.COM ([fe80::b0ad:e93d:d30d:b90%4]) with mapi id 15.20.9366.012; Fri, 28 Nov 2025 14:35:45 +0000 From: "'cedric.hombourger@siemens.com' via isar-users" To: "isar-users@googlegroups.com" , "MOESSBAUER, Felix" , "wzh@ilbers.de" CC: "Steiger, Christoph" , "quirin.gylstorff@siemens.com" , "Kiszka, Jan" Subject: Re: [PATCH v5 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v5 00/10] Add SBOM generation with debsbom Thread-Index: AQHcXTgJcpf9T/ieLUi62bwz4OQx8LUGm9aAgAGRRACAAAECgA== Date: Fri, 28 Nov 2025 14:35:45 +0000 Message-ID: <905d493c6ca962dfe7229bce6a9e1d3add20e3c0.camel@siemens.com> References: <20251124114638.2238090-1-felix.moessbauer@siemens.com> <1e26bd54-623a-48f0-a400-34a454ba4993@ilbers.de> <2b58f5057a9dffdb136c49959a387e7b1f0e5a60.camel@siemens.com> In-Reply-To: <2b58f5057a9dffdb136c49959a387e7b1f0e5a60.camel@siemens.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.52.3-0ubuntu1+intune x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS8PR10MB7875:EE_|PR3PR10MB4109:EE_ x-ms-office365-filtering-correlation-id: 09a7e96d-540b-4b26-adc3-08de2e8b6a8f x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|366016|4022899009|1800799024|38070700021; x-microsoft-antispam-message-info: =?utf-8?B?aTl3eEFVQ2UyajFOU3dFT3NveHg0ZC9uMndYMGw3YzZFYmp5MFREOUsrdDVx?= =?utf-8?B?eWZ3S0NSNnVjMFc0WEF4YmFERVlQOXNyampvM0dZY1hjdVpuV1E1OTJQem9J?= =?utf-8?B?dGljUTB5RjdSVFRCQ3B2QXpJaXJaNWRFWjNidHRqRFROakVVVmVFL05HMlhM?= =?utf-8?B?d0pVb2h1Y0NwWmtlS1BYaUdoYnR2VFFsejE4VksyYTVpVmtGTHlYY0pyZHpC?= =?utf-8?B?c1pmZ3ZZS1JkTzJON0hka3ZNUFEzMlYrUW53WERLWGNROGVHWUMxRE1sdzV2?= =?utf-8?B?bm1QZGo1MDUyTHBDeHRCS050MjdIUGtBbXlkNDZMODJ2SVJTOG9zM0RsbkQ4?= =?utf-8?B?ZThMbzk3QzRuSU1zVXdOa3BMY3lYWkVqT0JhSDVxeHFDWGFZT1UxelVWYXY3?= =?utf-8?B?UFVCUGlEMDNjQm9YeWJBNEZBQlpuYkc0REFEbzFhVXJuaDd4NFVIcWhTSldw?= =?utf-8?B?K24wSFVGYmw1WXVRSTVyTW1IbTVtVkpkOTltK0JuMmErb1VJMlNKOXhjNkQ1?= =?utf-8?B?NG5QckVaMWx6ZkowR1FqaHRyakZzVUVQMXRwWUxiTG51S2ppMnJPWXY1dGoy?= =?utf-8?B?cUdGK29jOUdVQVJYcnoycndKZ1VENmlXWU0rT1pjcWlUR0lON2ZHcHpFU25y?= =?utf-8?B?T254VHVHNTBxWHkrcG1ENzJUK21SSEsrTUIxMk93TWF6RnA1T2FicFdKMHRF?= =?utf-8?B?eFppcUlIMGJKSWpTaGo4VFRpLzhaU2h5UC81c0I2cCsrTGhUNDI3SGp2c2Fm?= =?utf-8?B?VEZVdHgrOE9JOEVma0o5NlRqUWd1dVFDUHBJaHJBUHZFUlE1a2tJdE1yRElB?= =?utf-8?B?U2NPS0JyZ3lBSDNDa1p4MTRLNmo3MFhRWVRyTk1OY0VMTk5UaU5LaUxadWpx?= =?utf-8?B?WGdLZjkwTkFNajcyNEE2dnUrOWQ2ZG40UlAxYnlXbmJkQmdFRFVNd0xNelUw?= =?utf-8?B?WWpWM2Y5bEZTNkx2U3FyMmNPUTE1TkNDR3J5Z3RDMU5RNlFneklkQ3ZLRUtT?= =?utf-8?B?VzRzMTZuY2tWWC9odWFvb28yTUg4c1ZIbklrLzFWcWZEMllma09YSVRkK04r?= =?utf-8?B?bkxhYktBWlN1ckF4WTFHUkhRSjJ3NmtNYzYxVlpiaWRaZm5ka3hYUUNCU0Yv?= =?utf-8?B?YzVvZDF1RWJNYVpGS08xcGsyTUxLTG5MbUZkbktjTDdzYzVVallLYXBsYmFQ?= =?utf-8?B?aEgvbnBGc2Y1Y1k3ZTBJeDVNb2VYVzVreUxsKzAza0dGa01mNEM1RlRUaFNV?= =?utf-8?B?VHlaaUVRc1JzbTZ2U2FpcVE0dmprL2JGOTFDMzJ2Q0piVnBrMWhmSDArc3Vs?= =?utf-8?B?Z29rdGpjOE1ZanFvQytjTnJqRFVCdTdXYnZGbENZcm51YUVlSjBYRmpqUkds?= =?utf-8?B?dlpDaS9Cb25ZekM4cVZZVzdaOGg2VVVibGRvcWxYUkhVbjNDQUMweWxJWWUv?= =?utf-8?B?bWEycEc3azNic1VwTUJNNjNEbDNXbWVjc0V1ZFVZMmFtOE9DdWk2VFN2c3gz?= =?utf-8?B?bUY3V1Z6cy81Q2sxUEtHSFpkQ3dETzNoWHM2SVhqOEFPaStzb3BRblFERW90?= =?utf-8?B?NGlLY0k0TmxSTWxhN3luTXBLcmdaNzJIOThFS0JzbFY0Mjg2Tkt3bXF5TktS?= =?utf-8?B?WDBVeTlYTEVOanpUczU1RTRhUWFteDBPNzRLenhpdk9Uek9JSmJOSGhqVGxz?= =?utf-8?B?cFQyZ1d0aXpKTTc5N3NDQU1BTDhLUEQ3TVFEWjNscXZwRGhKZ2ZEUkp5WUV0?= =?utf-8?B?bVlKZkpjTDhpMDByRGZ0YTJvbjdYam05Z051Ym5yNFpuTEs3WjNVSFpHQ1Fl?= =?utf-8?B?UWdZaHZRU1RpbWtDV0wvSnVRdm1BS0ZkZ0wzcHdOYzFQS3NGdEZQcTVnNW1U?= =?utf-8?B?bURMUkF3bjhGaExwRGR3a25pdXlTMUt0bjN3MzhKYVM4VDZoZ2ZYbTBzdm9W?= =?utf-8?B?WC93ZnBaSG9CdStzQTBrNjhOMFJ5Tld0cG11Y0JuWnh2NFl2cEJhcFhrd2Zh?= =?utf-8?B?SE1CSUU5RTRCTURjdFZQcjlTVDNrRFdOMGhISG9PSkRmTnVYV0d0SnVzbEIv?= =?utf-8?B?Z2xJdUI4eFNpQ2hMcGJFT3U5TWtmSDZ3bFRMUT09?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS8PR10MB7875.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(366016)(4022899009)(1800799024)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?TzJzL1VzQlVub1lNRnNFbVk0aEd5UmlUcXVYaWw0YVJ0c1I0bTVaRXpTQjF3?= =?utf-8?B?NE5abEZhcUl4QmFLY0tWZTdWdmg2bVkrOXM3am5TT1JRMWR1VVZXWGQ0a0Vs?= =?utf-8?B?ZjJyTGtDclJXaE1LYW9DL0EwbWRIblp0NlloZ0FSaXBiM1ZyanQ3ZENhZ01n?= =?utf-8?B?alE5MG1YbjhLYUIwVXdiMXRMbHlpVU5tU3hsd0F0UHNQRnFDc255djhXa21P?= =?utf-8?B?bVA0WlU1VkVPV3J1QVFVNFB3YmpEdkxFTzByNS9qWENtWU4rWHRDTVRMMWdC?= =?utf-8?B?WkFZZU11cUg4WFFrSmZyUjBjNVQ1c0Q0aDVzM3ZTV2VXYS9RTTRpdlVOYzlZ?= =?utf-8?B?WXZsN0R1YmQrSjR4eTdHS05IUnJzN0E3WTRwOWRVcU4vc21DY0ZkeS9XRzVW?= =?utf-8?B?RjJNNnpacG5id0pMclA2WGpLNU1SOHVNRmNVcWxKOHhvdlpwWmpXS3hFKzZt?= =?utf-8?B?K1hBc2FDT1NzTE5UZ1FvdDJvbS9YVzI2eVR2eW5xdEFVZHdqYmVWRFJidWNp?= =?utf-8?B?MnM3RDI4MFlobjVVdUVadk9KRUEzb1pieER2L0R6SXkxeXhzSlRLS2kwYXRY?= =?utf-8?B?NldleWd1OVRQZ3hBeWd4Z3YycThxazkwaklkWEk0TG1lczRkQnV4bUhYdDcx?= =?utf-8?B?V3JwUmZvc2d2VVlpTEtSVkFhbmwxVTVGTDBYWi9ycXYyTk96QkJYS21yNkJJ?= =?utf-8?B?SmtpbnBwcUtURWVjRklQdkF1cnoxczBsdmw4a25TWHNlaHY5cUhhYlZuRWtp?= =?utf-8?B?NXk2ZDA0Qm5UUUpVVDhVNVZpSWJkVjlIbGhsOC9VZHpJY3hkbTFrakEvWEly?= =?utf-8?B?QlhVblQzaGlGSkNXbHNjelMrZGxKd0ZTbkx2WXFmaGNpb3pOU3J3WW9IWll0?= =?utf-8?B?NFhUVWhrelFqTzdncmRVWmQramdqR3hpM3FSUkNDOWczdW13UUNWUWRFRjI1?= =?utf-8?B?dTQxMlJwU3hvci9oMUlWWXNJeU16VnY1TDVvbWNmQVpmekhVcjBzQjRXVDFX?= =?utf-8?B?dG5NSHI1YXZMUXBJbjBWUVp4cGIyM0lTWjJscDg3c3NNNkJnR0FnemQ2UnIr?= =?utf-8?B?QzFUYXRIZHZic2lGcHgrMEFIM2xkWE8wNDF5bE9UZTlWN2FzUXNSOVkvWDdl?= =?utf-8?B?SlpTbnNPWW0zL3hzYzhUSXVVK3JKZ29OSW1vYjAwZ054ZXV2ekNpQzcyZ0JX?= =?utf-8?B?R3hRd3hXVDBsNmZuSWcrckswZ3RoNG0zSlNnS1A4NHRGTzFIQ1VKcGYwTWM5?= =?utf-8?B?SCtlTkxtR3ZHTjlmZ2VNVVNCRGVYUUM2bVdyM0NhbW12RTNRNUVkVlBwRVo0?= =?utf-8?B?c21jSzdDMngyTlRrYXBpSFJOVHh2OVRBOG9qL1FHVU1ycHBnNHpxZGVBbEw5?= =?utf-8?B?V3RwZWh6RDYvT2krcDlNbEdWcmpCMnRmNGgrVGQzTlV5ZllXRTVZV3B5TmE4?= =?utf-8?B?ZU9ibW5oL1FIR0FhdDhwN21DYkx3cDg3aldLc1YrN3JiZWZCQ3plbEt2dVp1?= =?utf-8?B?RFJPd3N5UUxkbytzeUR6YmlKdlJjWjFuTzFGT3FZN2t6QnRMYy9peTJwN29L?= =?utf-8?B?WXJqWFRjWVlVTkMyeDhKOHlDSzZ2LzU3RE5Fc0VETFZMU01aME9ndFFsNXJZ?= =?utf-8?B?Uk1iV1RSTnNjTSt0N1lLdFQwZVpndUtROU90OTNhTlVOZUQzVHArSVNzVUls?= =?utf-8?B?dHpSL0pyZWpQNE5YdzdIMEh6Q0p6UTFva1h3V1htdWs3REUyWFhzeTkxZHBM?= =?utf-8?B?NEFlWVpYZFZxbUw0RHJWTWh4a0w5WWZZRVJtbFBmSk9YRlZpS1hldDlVQmE5?= =?utf-8?B?UzJmRkVoT3hJZDZYbVVjbGFqTiswZDhOV1EzaVczcjE0TjRIN2ppMkVIVlZE?= =?utf-8?B?eGQ4VTlweDl3R2NUZXFjZ0hLcWlaN2JsaElHelY4citRTUtHRjNBVENyNVhu?= =?utf-8?B?WFFvNDl1bThpamRiditsbU4yWFN2TDI3bFdZQjZ1bmlaNXlHZXVycVd3Uk1M?= =?utf-8?B?OHpXaEUwK3oybm56cDJYT1F6aUNDNVZCQUFZZlc5SmIvc3VSNUhSYldRcm1K?= =?utf-8?B?UjJSeWcxNTl1WjkxTHBNWnZSY0RsNjQrQk9KUUg4MHZQK09KZGgxZHQxQnpv?= =?utf-8?B?c0g0aTVkUlVoSWxvc0ZRNHpSYmFLWUhPK0ZMSElDa0pLWVBTQ0ZBd1V0aEVI?= =?utf-8?Q?Kxmlas5u3YvBMojy2V994dY=3D?= Content-Type: text/plain; charset="UTF-8" Content-ID: MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS8PR10MB7875.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 09a7e96d-540b-4b26-adc3-08de2e8b6a8f X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Nov 2025 14:35:45.6022 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 7UHIwPJABu3B8/EVNwxCwXpMndaCQMryPDcrB8JvjsZxkGkigKA5gIFFt3/pLQ77dOZmzfBHPwjRarYvH7LKQXvN0MazvqPkn4bAIywRxwU= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PR3PR10MB4109 X-Original-Sender: cedric.hombourger@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b="XmjE/h26"; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of cedric.hombourger@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=cedric.hombourger@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "cedric.hombourger@siemens.com" Reply-To: "cedric.hombourger@siemens.com" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: i1g+6ehNsIuD On Fri, 2025-11-28 at 14:32 +0000, Moessbauer, Felix (FT RPD CED OES- DE) wrote: > On Thu, 2025-11-27 at 15:35 +0100, Zhihang Wei wrote: > > Hi, > > A CI failure occured in full test suite: > > citest.py:CustomizationsTest.test_single_customization > > > > Log follows: > > builder@13751127e9ed:/work/testsuite$ avocado run > > citest.py:CustomizationsTest.test_single_customization > > JOB ID : 5a0c694b516485d29feccb614eb23dddb0b667af > > JOB LOG : > > /tmp/tmpo3rzdofv/avocado/job-results/job-2025-11-27T10.47- > > 5a0c694/job.log > > (1/1) citest.py:CustomizationsTest.test_single_customization: > > STARTED > > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_tar: > > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar- > > image-ci-qemuamd64/1.0-r0/temp/run.do_image_tar.8314', > > 1, None, None) > > ERROR: Logfile of failure stored in: > > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci- > > qemuamd64/1.0-r0/temp/log.do_image_tar.8314 > > ERROR: Task > > (mc:qemuamd64-bullseye:/work/meta-test/recipes-core/images/isar- > > image-ci.bb:do_image_tar) > > failed with exit code '1' > > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_cpio: > > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar- > > image-ci-qemuamd64/1.0-r0/temp/run.do_image_cpio.8315', > > 1, None, None) > > ERROR: Logfile of failure stored in: > > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci- > > qemuamd64/1.0-r0/temp/log.do_image_cpio.8315 > > ERROR: Task > > (mc:qemuamd64-bullseye:/work/meta-test/recipes-core/images/isar- > > image-ci.bb:do_image_cpio) > > failed with exit code '1' > > ERROR: mc:qemuamd64-bullseye:isar-image-ci-1.0-r0 do_image_wic: > > ExecutionError('/work/build/tmp/work/debian-bullseye-amd64/isar- > > image-ci-qemuamd64/1.0-r0/temp/run.do_image_wic.8316', > > 1, None, None) > > ERROR: Logfile of failure stored in: > > /work/build/tmp/work/debian-bullseye-amd64/isar-image-ci- > > qemuamd64/1.0-r0/temp/log.do_image_wic.8316 > > > > In all of these three failed tasks, error log includes: > > dpkg-query: no packages found matching grub-efi-amd64-bin > > > > > > To redo the test using avocado: > > 1. Have a clean clone of isar, checkout to branch next and apply > > your > > patches: > > $ git clone -b next > > https://github.com/ilbers/isar.git > > $ cd isar > > $ git am /path-to/0001-my-contribution-to-isar.patch > > 2. Run kas shell, setup CI prerequisites (avocado, qemu) and > > cleanup: > > $ ./kas/kas-container shell kas/isar.yaml --command \ > > "rm -rf /work/build/conf && /work/scripts/ci_setup.sh" > > 4.Run the failed test in fast: > > $ cd /work/testsuite > > $ avocado run > > citest.py:CustomizationsTest.test_single_customization$ > > Hi, I was scratching my head how this could fail, but well ... it is > a > badly written test: > > In isar-image-ci [1], we do a ton conditional IMAGER_INSTALL:append > and > IMAGER_INSTALL:remove, which are not aligned at all with the machine > configs. > > Please add the following line to that section: > > IMAGER_BOM:remove:qemuamd64:debian-bullseye ?= > "${GRUB_BOOTLOADER_INSTALL}" > > This then should be added to p8. If you confirm that this works, I > can > also send out a new version of the sbom series. > > Anyways, I would be really happy if we could get rid of machine > manipulation parts in an image recipe. This is IMHO an anti-pattern. Agreed. I would love to see our machine-specific (and image-specific) variables prefixed with MACHINE_ (and respectively IMAGE_) to make the scope very clear. This would also ease the job of linters and reviewers > > [1] > https://git/ > hub.com%2Filbers%2Fisar%2Fblob%2Fmaster%2Fmeta-test%2Frecipes- > core%2Fimages%2Fisar-image- > ci.bb%23L25&data=05%7C02%7Ccedric.hombourger%40siemens.com%7Cbdd44d79 > b4084dc0182508de2e8ae81e%7C38ae3bcd95794fd4addab42e1495d55a%7C1%7C0%7 > C638999371287144635%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsI > lYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ%3D%3D%7 > C0%7C%7C%7C&sdata=6KUi2SiAHEg5o4MCLaKH8g1UNqmZ5FdtqnO%2FeCXVLMs%3D&re > served=0 > > Felix > > > > > Zhihang > > > > On 11/24/25 12:46, 'Felix Moessbauer' via isar-users wrote: > > > This patchset adds proper SBOM generation in the two standard > > > formats > > > SPDX and CycloneDX during the rootfs generation process. > > > > > > The generation is itself is handled by a SBOM generator > > > `debsbom` [1] > > > which is developed as an open source project at Siemens. It is > > > still > > > early in development, but it has enough features for what we > > > require > > > in isar. The required dependencies which are not yet available as > > > Debian packages were minimally packaged directly in isar too. > > > > > > This is a followup of the previous RFC [2]. Since then the series > > > has > > > changed a lot. The SBOM generation was moved from a simple OE lib > > > to > > > `debsbom`. This also meant the introduction of a separate chroot > > > was > > > necessary. The SBOM generation process was also moved from the > > > image > > > step to the rootfs step, along with a lot of minor changes and > > > improvements. > > > > > > [1] > > > https://github.com/siemens/debsbom > > > [2] > > > https://groups.google.com/g/isar-users/c/8L-CF4BJY0I/m/p0N3o_zfAAAJ > > > > > > Changes since v4: > > > > > > - rebased onto next > > > - fix race condition on creation of ${DEPLOY_DIR_SBOM} (aka > > > ${DEPLOY_DIR_IMAGE}) > > > > > > Changes since v3: > > > > > > - fix issue on external bullseye initramfs (we now disable sbom > > > generation > > > on all unsupported distros rootfs instances) > > > - update debsbom to v0.4.0 > > > - rebased onto next > > > > > > Changes since v2: > > > > > > - fix issues when HOST_ARCH != DISTRO_ARCH on derived > > > distributions > > > - update debsbom to v0.3.0, which fixes the Origin: bug reported > > > in v2 > > > - generate SBOM for imager as well and create merged sbom of .wic > > > image > > > - resend imager manifest + wic manifest patches to reduce > > > conflicts > > > > > > Note, that the patches p1-p5 are most important as they add basic > > > SBOM > > > support. The remaining patches address the imager + .wic bom > > > part, > > > which also can be merged later on. > > > > > > Changes since v1: > > > > > > - remove tarball > > > - refactor packaging (auto-derive python dependencies) > > > - only build missing packages (varies on bookworm, trixie, noble) > > > - add ubuntu support > > > - only generate sboms for supported distributions (bookworm/jammy > > > and > > > onwards) > > > - update debsbom (includes bug fixes and more information for > > > source > > > packages) > > > > > > Christoph Steiger (3): > > > meta: package python libraries for SBOM generation > > > meta: package python3-debsbom > > > meta: add SBOM generation with debsbom > > > > > > Felix Moessbauer (7): > > > refactor: move get_rootfs_distro from sdk into rootfs > > > override distro vendor in SBOM on Ubuntu > > > add support to add imager dependencies to BOM > > > wic: create uniform manifest describing all image components > > > qemuamd64: add IMAGER_BOM entries > > > imager: create SBOM of IMAGER_BOM packages > > > wic: create uniform SBOM describing all image components > > > > > > doc/user_manual.md | 1 + > > > meta-isar/conf/distro/ubuntu-common.inc | 2 + > > > meta-isar/conf/machine/qemuamd64.conf | 1 + > > > meta/classes/image-tools-extension.bbclass | 29 +++++++++ > > > meta/classes/image.bbclass | 7 ++ > > > meta/classes/imagetypes_wic.bbclass | 30 +++++++++ > > > meta/classes/initramfs.bbclass | 3 +- > > > meta/classes/rootfs.bbclass | 23 ++++++- > > > meta/classes/sbom.bbclass | 65 > > > +++++++++++++++++++ > > > meta/classes/sdk.bbclass | 10 +-- > > > .../sbom-chroot/sbom-chroot.bb | 30 +++++++++ > > > .../python3-beartype/files/rules | 8 +++ > > > .../python3-beartype_0.19.0.bb | 29 +++++++++ > > > .../files/pybuild.testfiles | 1 + > > > .../python3-cyclonedx-lib/files/rules | 8 +++ > > > .../python3-cyclonedx-lib_9.1.0.bb | 48 > > > ++++++++++++++ > > > ...icense-description-in-pyproject.toml.patch | 28 ++++++++ > > > .../python3-debsbom/files/rules | 8 +++ > > > .../python3-debsbom/python3-debsbom_0.4.0.bb | 45 > > > +++++++++++++ > > > .../python3-packageurl/files/rules | 8 +++ > > > .../python3-packageurl_0.16.0.bb | 33 ++++++++++ > > > .../python3-py-serializable/files/rules | 8 +++ > > > .../python3-py-serializable_2.0.0.bb | 38 +++++++++++ > > > .../python3-spdx-tools/files/rules | 25 +++++++ > > > .../python3-spdx-tools_0.8.3.bb | 46 > > > +++++++++++++ > > > 25 files changed, 523 insertions(+), 11 deletions(-) > > > create mode 100644 meta/classes/sbom.bbclass > > > create mode 100644 meta/recipes-devtools/sbom-chroot/sbom- > > > chroot.bb > > > create mode 100644 meta/recipes-support/python3- > > > beartype/files/rules > > > create mode 100644 meta/recipes-support/python3- > > > beartype/python3-beartype_0.19.0.bb > > > create mode 100644 meta/recipes-support/python3-cyclonedx- > > > lib/files/pybuild.testfiles > > > create mode 100644 meta/recipes-support/python3-cyclonedx- > > > lib/files/rules > > > create mode 100644 meta/recipes-support/python3-cyclonedx- > > > lib/python3-cyclonedx-lib_9.1.0.bb > > > create mode 100644 meta/recipes-support/python3- > > > debsbom/files/0001-Use-old-license-description-in- > > > pyproject.toml.patch > > > create mode 100644 meta/recipes-support/python3- > > > debsbom/files/rules > > > create mode 100644 meta/recipes-support/python3- > > > debsbom/python3-debsbom_0.4.0.bb > > > create mode 100644 meta/recipes-support/python3- > > > packageurl/files/rules > > > create mode 100644 meta/recipes-support/python3- > > > packageurl/python3-packageurl_0.16.0.bb > > > create mode 100644 meta/recipes-support/python3-py- > > > serializable/files/rules > > > create mode 100644 meta/recipes-support/python3-py- > > > serializable/python3-py-serializable_2.0.0.bb > > > create mode 100644 meta/recipes-support/python3-spdx- > > > tools/files/rules > > > create mode 100644 meta/recipes-support/python3-spdx- > > > tools/python3-spdx-tools_0.8.3.bb > > > > > > > -- > > You received this message because you are subscribed to the Google > > Groups "isar-users" group. > > To unsubscribe from this group and stop receiving emails from it, > > send an email to isar-users+unsubscribe@googlegroups.com. > > To view this discussion visit > > https://groups.google.com/d/msgid/isar-users/1e26bd54-623a-48f0-a400-34a454ba4993%40ilbers.de > > . > -- Cedric Hombourger Siemens AG http://www.siemens.com/ -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/905d493c6ca962dfe7229bce6a9e1d3add20e3c0.camel%40siemens.com.