From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 07 Jan 2026 16:06:47 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f59.google.com (mail-pj1-f59.google.com [209.85.216.59]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 607F6jYF026179 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 7 Jan 2026 16:06:46 +0100 Received: by mail-pj1-f59.google.com with SMTP id 98e67ed59e1d1-34c5d203988sf4382935a91.3 for ; Wed, 07 Jan 2026 07:06:46 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1767798400; cv=pass; d=google.com; s=arc-20240605; b=Jdr1zkwFXNiW9X+JKll04HdHAwj2/w618HApCxUTr7nEP4sztFlCljitoqtkQqLABQ MHzn1y1aAUzJhxpCAN6UYZ0lKhE/AzZUGhZP9jRr2SsPLfCsX+cu6JaXHT093CcnvCbV Mgokd+H4npTYOPIxSOB2hy5y48mgfjfX6CoEydUO5PaKbDk+sIL0Y2/SHi35uaDn4MJY 0w5LALzhQbLlhwS2PfWyYHsNf1daKzfnVdnMtZQ3rU3klzX9JvOrLKXp1lRL/9rpd1OC 47VN/LrXinn+Uu607yKDA34pnCyDoGdczOI+aeH2E/+QHb7RSqANYe3u53crmgdGPlnt +HUg== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=uGNeGAcZaTy1aBDIYhzRe2x8lvaB+kd5m4d6SJn2nVg=; fh=T18RD5cww40qJ/HhR3m8aj0jbrrgo8qgEhRemambO6c=; b=NaNoU54lyHraIumHSjJNOjRnZMHE3mzSbzr920UMs9SPhZVYRZKmj0K/JI5hRKNNWl hJJ5fJiaBFL6sv8u+tIIS11XyOXuiw7BDOc8V5RAXx2TPXSZVH+PldLUBxqB/s+oikql m6nIBMB2uKjMBKKvugusNZG0g9HVe4C+aZw1kSBsg+HhbBENs7ddE4oErUTLpO+jN8QA pHCKQqBEM1Kxb9IBVaXTxQc5Zx8qdsC9E9h6AgjRpBK4+Smg1qNiy8c4p8yZKOc6p3Qh TT/gFbP0PYpC4U02q/imTMPJZbd4oDCuYVTx/18Kxb+iZ7R2lNZsew8OzeQywd7wYFI4 P49g==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ziezrRTo; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1767798400; x=1768403200; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=uGNeGAcZaTy1aBDIYhzRe2x8lvaB+kd5m4d6SJn2nVg=; b=OyZjxmIwqcG9sjIaGx1OV8DvyZAcYjXZOUEEFflZpTOiI7indUw6ScgkqrJIbE6PsI 2AuvrPvBhCmCWvGnJAs44VlpCLBVU6oKvWxQcyErrRH26JcXDiqiCjkzmQNFrrx2Saz+ 53Pc0xHoItkhv4c670TWOQRlkdT4Ntv1QCuYGFQkB3+4T4K9CWEnKYqfFhemnmISuV6m Wpj7B6Qd+EOZMQh4ExHACsVMOsRnFx3uebyq8Pgeeqzk6EZibE021/d+8WPY7DKgNFEV Xf3LGnFztq0LyYiMKVzcss2ocBeUea1jlVYTqrNAesk3tHZJq8zLxawUIrShbqM/QcNM DlDg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1767798400; x=1768403200; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=uGNeGAcZaTy1aBDIYhzRe2x8lvaB+kd5m4d6SJn2nVg=; b=flJOyqs4o1X9Ch+N5R4OhBFbrkoL9O6UVs54JkQLlslyzqliSqDkxgHQqg/OHXN/7u Xh8a6k3EtqqJ6f1q+896ZGpGsuFSVn5CN+k9OR67ySzuPN01PXlINtIHutrPQ663h7eo HOp/fI976uQdTemyhGjLkbV3LFTncMm7uVNgMZki1VVVmPxspEMZw+jJawAHp77r3kdx +mWdX5lJecJWTXXD4xsxUO2kVV6+dWECLAc8g9vsDdyuPNrurHlCQk2FRz4uYVlT6HTW xLbBJoC08gEJjUxss37ZSVWJrJVozYzYbAQHuKnzYtqmZruCRP+Q+qGnMOor/RgByv6H 0SDQ== X-Forwarded-Encrypted: i=3; AJvYcCUJoY8LEYTvc5Avfe71m5Fs16NuZ+v+fevJnG+xjlUEViNiM+utHSUjXf8nd1H8Y5FvXZt+@ilbers.de X-Gm-Message-State: AOJu0Yz9/6sj9Th65E9y25zBNM6YaktUFXOtFIGAsU5Hu4w4oJY1d8iu nxJvRo4S2jX7POX2uv4ExntPFkmIKMwfJfARyc8iF9ZWmXU+Ww/K/C9k X-Google-Smtp-Source: AGHT+IFuBgtZtGzNlBwqPI3cmxWUYyfPd3csisIxJzYtMq9CVzPichEzhyl5vE+WTv6RPpg7JNMXqg== X-Received: by 2002:a17:90b:3905:b0:340:776d:f4ca with SMTP id 98e67ed59e1d1-34f68c621c8mr2873039a91.26.1767798399454; Wed, 07 Jan 2026 07:06:39 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AWVwgWaz/A2p3/lCVQkRyBqwIqFN2FfqRGLfdpoH4h94+HcxrQ==" Received: by 2002:a17:90a:ff14:b0:343:6a95:b0d2 with SMTP id 98e67ed59e1d1-34f5ea805fals1935770a91.1.-pod-prod-03-us; Wed, 07 Jan 2026 07:06:37 -0800 (PST) X-Received: by 2002:a17:90b:5810:b0:32e:38b0:15f4 with SMTP id 98e67ed59e1d1-34f68b83b04mr2708249a91.7.1767798397238; Wed, 07 Jan 2026 07:06:37 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1767798397; cv=pass; d=google.com; s=arc-20240605; b=liWjXquS+49EM1Y/dz3PfHatykniH5i7rTzwGrriJiICL6KRpbJSheSnjIno7ZLr03 ef/CGi+XSSPCJK53TpZMiMHAQKUVEJeoyF4t3+AgIeukFBvbB/GYts3lxEWtUGR+seMB VU52UQQTYip0ko2wL61zV4qaFtYmZHo2HPQCmyulxQHVQx/HXl0W9ez5/KLtY5YV7zcx 877G1RjwfDKJk1XsYxejsKEH8eqzCJZKNNw3WB29d8P4whYoU3JusGz1BvohNimwxRWR 6J8oGS0ehdrk8psq5H00QqrjzzKYAI/s09zRxTZ4js6HF49cjIuxG46Fb3exPaaajRl6 6XSg== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=JQZfyEv/Zb7mbEEhU078Y6FF76OcW4V+Gc1YQxIqw/M=; fh=OumoIhe9601IThEpgsr8A9j32GX17m7LdJ2E/VTgynI=; b=LGiQJ/5tBr7TRgMngAkZbmNvBkQXTOuhYk60an4pcjDEp5QHbUuBXGD/KHqY7BbN+b kl7q0pFWDKbluoD/ZJ1ST3GVF9yeUdUuuNC01YXGWyfRJK/oIj0E1JO0RZLBQ7PEBQ3u /FbBgsPHqCU0/a7m13GH0IIKkR7qS88ya3eSuHhz/F6KKDG8ezyCf1ClcQBEXTf6vTj3 sNkyM5Jk+5X5OhWmFqkO8Vq87PUlMQU44ZF6ePTjTIru02vc7R128HeUveYpiHOM12Y2 kQH0mI5w3PsSIY3KFKnyzqitjWRQsD/vsaJwdhMOLLB58tKriWiuQSaz0v4ecw4pyEa1 +p2w==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ziezrRTo; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from AS8PR04CU009.outbound.protection.outlook.com (mail-westeuropeazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c201::3]) by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-c4d93b595bfsi109261a12.4.2026.01.07.07.06.37 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 07 Jan 2026 07:06:37 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) client-ip=2a01:111:f403:c201::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=s7Jtd+V5V4BP5qaqMum0aLq7QygKexlraW5kG7+rTPR7saQ5qionetE6VUqEoynUwBwoHpbkHfkb/bj5WkvzPv1KAsuiy8ySlGUfj61lFoNi+vi+sC/cvVmKIQLUv1WDEa3r220ITPsF5FVKErI5q1H3mA0/qKYL5pZKTvcNxjCyXcQi4PasibDd73NVVMUpbB0SASfDh8vdxcheuamUZXVToaCm6BffCpsllXjZ9thX1Tee1WyPvMOFWHK2jNxHnp0vA/SCyjKY9+BB7+eP/e1A2o/HjyZY2bvo9J1SAnekP1j3iGyv4YjyjlHYShPrwtpPQHSTKQNBqNurX4s/Iw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=JQZfyEv/Zb7mbEEhU078Y6FF76OcW4V+Gc1YQxIqw/M=; b=JH/ICtE30XbxIpCBKsqlZeBYR+denl/BHytlIFR/A38SQflkLaK1MnZJSEysnPJoCCitd3QQ72zSNQuMj64CWVuRGq9BC+PzaJ2DMPIJbmYSi4sM6lo9XEjkMySaMC6d9eDr173Q0jGOkMj5PPGWirEyS2PThKQce1DjwdhUyolhCDplmph2x4f6ROnZPAzFUwQWSvcAPKJD7XFdn34dDNpJ23p1ZUhOfufxdiSaRoNYPx0AyYMgVzwG5+wcG24eixu1lKD86F2PfUCYehbh2pd2jODRQAIvqntqkPz/COx+SifP1M/Wrsstz/G9MGvJSYRQVFCZOsK90UFiUOmB6w== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by AM0PR10MB3172.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:208:17f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9478.5; Wed, 7 Jan 2026 15:06:34 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::9412:cd7f:3f72:92ab%4]) with mapi id 15.20.9499.002; Wed, 7 Jan 2026 15:06:34 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "isar-users@googlegroups.com" , "Bouska, Zdenek" CC: "Steiger, Christoph" , "Gylstorff, Quirin" , "Hombourger, Cedric" , "Kiszka, Jan" Subject: Re: [PATCH v6 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v6 00/10] Add SBOM generation with debsbom Thread-Index: AQHcYqCqMJoYNW/wIUSbsBb048Q1krUTLMEAgDPcaYA= Date: Wed, 7 Jan 2026 15:06:34 +0000 Message-ID: <90623bf31851d17dfe746459fbfae86461f59b9d.camel@siemens.com> References: <20251201085813.1616095-1-felix.moessbauer@siemens.com> In-Reply-To: Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-8 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: DU0PR10MB6828:EE_|AM0PR10MB3172:EE_ x-ms-office365-filtering-correlation-id: 44299bd2-2d0e-422c-5c33-08de4dfe5912 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|1800799024|376014|38070700021; x-microsoft-antispam-message-info: =?utf-8?B?UWhQUVUvKzBVN25nZjhSV1Rub1BhZmlLdUFRYXhMUkNTdFVQNllTSG1iUTgz?= =?utf-8?B?MkF1UVBrYjhiUHppTmRNNFBzai9Zc25tUjhKNThtZmwyWm1TZUFUMHU3Y0ZJ?= =?utf-8?B?Zm4ybkhVMmF2NzNmRCt3T000QzBxb0dUeHB2eHRGbHhZYkxBMkJEUmRnRHBO?= =?utf-8?B?VUFFVVFxUUhaNFFDcWt3QUozTSthNEc3TjNINGM0VE5ZeHhML0VyL0J2MFRz?= =?utf-8?B?NDFpZ3JGN3ZxREREZG9PMUNxMWpacVhnVTRwVlY5ZC8zditUOGlpMjM2RHhw?= =?utf-8?B?cjZvdG5vckhtRTFtS2NzVDgzTnpiSHFLMDZUNkFWQXZTUHR5KzBScXoxK3RB?= =?utf-8?B?bjMyTlhUeDdpV2czaTVYbmFrSU9YbXQ3c1VQYnhWSlVlWm53TUhVenhnSy93?= =?utf-8?B?R2pqbUZCMXRpWkRCazZINnN3Yzc3NDRPMkJ0R2NXdlMxNVJqeXpFY2x3bjd1?= =?utf-8?B?MDd5VW1uK1pwQkF6aVAxY0R6VkdYaXlFbDBsSldXVFBJRHZWZ3grSkVnOVJR?= =?utf-8?B?K3g5M1Ryb01Yd1cyZzI4ZUdOZWVrdlVBZ3RQd0FiQSthTFM3ajVUeTg2cGx1?= =?utf-8?B?R3A5WDdsaVZJZlUyeHNvRzZLNXFLYUhXckJ4OGxGSTJ3eW93UVdnQlg3SG5k?= =?utf-8?B?L3VpYXoyeXhaN00yNTQ4WHh4WGE3N29kQ0pseWxXaDQ5VTMvYVpLejR5a0Fs?= =?utf-8?B?bzYrRXZDTnpZN2d4NFZodnB2TWJZTnZUR0FhT05aY3Z6cFhjZUQyVXYzWDR6?= =?utf-8?B?N3k4OVdQRmxIVWNaRmVicGlySFZqWkF4R2dXMGF6K0c1VjNMN210bE1oczdj?= =?utf-8?B?bWRlNGxMYnYvNk91NWpLOTd4bWxzTjR2M1RCRE14ZTNUYnpGaHRhNklkSVVz?= =?utf-8?B?Z1cxNHdKQ2FMYWRkT0hiNFIyeDg1bEFMc3c5YkE2SXJ3ZGlRaEZzN0RXNEpp?= =?utf-8?B?ckpaVzh2SnRDMHp2b3VKYy8wVzF4VlVwTWhBS0xoaEwzbEg0Mlh6WkdpcWxI?= =?utf-8?B?VTdac25lNzNCNnFneURrT3EzZFo3R0M4bDhpZm9jUEp2WWZNOHl0aFgyWGpG?= =?utf-8?B?Ym4vRVZOUTk1NzlkMWlqUjhWU1p6a01tZ29laUU3OHB0b0NVWXlIWmpDRTZi?= =?utf-8?B?T3d5T01BNGhHZXBaVXhaa0M1UXErdlBWVG04bVZNMmZzSUFIN1VSL0dFS1FM?= =?utf-8?B?Vk5OTWJxNG4xUnZVcHlFa2RHRU5EeE56ZW5Tbk82U0lOOHh5RFZZK1RXeVdq?= =?utf-8?B?TmE2RnF4eDdqK21GT21SVVRxSHZPc3YreWFJZUFsaVVJR0xzUG9IS0lOQ2x0?= =?utf-8?B?SHVHV3BVblZZdFlaTkFhVmZ1YXVRS3ZsL0ZHVEluKzMvcGM0V2doMUhTZmV0?= =?utf-8?B?RTJlN05kUzBqdjFNN1J1RUtOaU5PbDZYbHJXVHpYNS93YWJMVWFMK0daaitU?= =?utf-8?B?ck9Fbzd3MFdWc1hYTld4R1pZMEd3ZXJua0pYdTc3SWpDUWVFamVaQXFlRkIr?= =?utf-8?B?YXcyeG1CYXoyenhzam1kam1iS05NbktDdi8rdkNRMzE2MkNVMmZEenVIVFVX?= =?utf-8?B?YkNkN3MzYWJvbTQ3VWtTSWt2WEhuaW5obHluS2NZOWtLdXNnOHZJZWV5SGlk?= =?utf-8?B?ZnFzRzdvZU1MZEV3VVQrYU5LOGpsZEtvejZ2RFduSFhTaEUyUXdaa29hMVZZ?= =?utf-8?B?UE1hcEV4Ly82VUZ0R0U4YVJpRXFvdGtINml2YW5Rc2lsT0NvNkpaZEtScXhO?= =?utf-8?B?c054dk1ackJza1REaVdDQnp4cUhjaVNqOFFmZXdQdFN6Sit0RHZxTnA5ZENh?= =?utf-8?B?Tk9KZkdDc0xqSkhGYmEreTg4NnVENllKTjlPb1dveml4d1dmbnFrTlB2Z2dO?= =?utf-8?B?U09teW1qaUIzU2wwRzk5aW4xM1YyUW5rYlIvcGtVSnp1Qlc5RzI1SGx0NktL?= =?utf-8?B?cW5wKzlmWHQxS2U1aVpOL1d3bW83NGZEUThlTGhKNjRJV3ByR2d6Q1JGT0do?= =?utf-8?B?UmoxbWE4S2N5NVY2SEhpZ0FiQTQ2MXltZ29PYnJjajE0aFYyMm1YTVBSRXR4?= =?utf-8?Q?sNdefx?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?dC8zZTR4a0xRbXQ4V2dRRXQ4R21RV1BmWWd2QzZuTW52RjZiamdmeDkvVll5?= =?utf-8?B?ZDQyczlSTlFXV25TbForTExyeXJPMTd6eU5qcm9FejZma2QrMmVSb1VNc0hK?= =?utf-8?B?c0RKanAxOFR4UDdVdStyK2FRZThOQ3lISVNaNHo3OEtRdjc1MmNWL3dobzNN?= =?utf-8?B?TTlSeVUzbFA0aUxsZkxFKzNUeTBzMGVsV0tuN0NMaXpBZXlvbzExNXkzT0pn?= =?utf-8?B?dmVvVlhWdS9qOURmNnB0ZXM0bmNRekdxZzZMVEx4NE0wTXlHdGhidll4Ym83?= =?utf-8?B?Z0MxN3UzOVN3MnBUU1RhWnc1QzlLcFhocTEwcTJOQkNhb3h0WFdpVVJzRUZq?= =?utf-8?B?ZW8wRVNGT3VrZTl3RW1nTVRENW9zd0hXVHFyVzVJUlNPS08veCtRYlE1NWZB?= =?utf-8?B?V08ydk9jQ0YrWDlwSGNYSWlLVEd6UFhQQjhwVXBSVWZxbEdHei8vb1JKVlhy?= =?utf-8?B?a1NFb2h2VkFNMHF1b2tId2YyYTFsZXlpWXAxamxCbEpIdklQdFNyRjhnMXhh?= =?utf-8?B?cUcraDQ1MjdGSE9MYzM5Z2pTQmVMNlpDM1hwaUpxclpZaGFIYmRybzZZWE0z?= =?utf-8?B?WElkbFRLcGVuVFVIQ1NJdmsyOTJGNEFnNjhVV3dyMHhFSTV2NDFLWDBXTkZR?= =?utf-8?B?TUFtTENYbFkyQmY5SDRuZE9kMlhqVm12cDlTUFdTWjZBKzRGdVUxWE9DKzZX?= =?utf-8?B?R1dUWHFOYXZnaDUxdlZ4QVBVa3RyTnVEYzlBWW90cGpDaWMrd3h3R0dpMGRX?= =?utf-8?B?Y0xWTXhicGVNUHpVMWtPTDJGUXljRGlLdHdOb2hMSVFwZ1dRK1lQY3ZsNDNK?= =?utf-8?B?UGdtdC9tS3dtS1lENGhGSmdyMVVKWmdRZXhoYTJjWFFUNHpsRWJKaGw0NUpZ?= =?utf-8?B?eDVtbFdHbU9RTCsyVWtIbFVtMVltUFFFU3BsZWNvNmNVTEFxazVZWHJLdEpy?= =?utf-8?B?RGVnNnZhaUVLWVVEUkJJRUZ3MUZsZkZxTGdsRklBS21Sbnl1M2F2TGhVK1lF?= =?utf-8?B?ZUdKb1IrY04wNVNWcitLME9iajZETFcwMjBSRmc3eE9JcFR0aUxvWlN0WnFu?= =?utf-8?B?UkFsYWVoN3M5U1JrenNYZnB2d3plY0ZjcXFOTkFZdVN2ZDJobUJ5ZHk0ZlQx?= =?utf-8?B?ODFMa0doTlVka0ZFZm5BTVJnWTJsNmdCMUZ3TkdVVG8zbHZPMjhOUFYwM2JI?= =?utf-8?B?TkJ5eVJMZ01lckZ5d2xOcmZvVzJYNUxHUWphVC9hVTFmbTRML0NLMFhKL2VZ?= =?utf-8?B?eGN4T3J2NmJNbmdmNmpDYXVWMzJ0NW1vZFhndCtFbnVlTUp5N0oxK0ZDQWhK?= =?utf-8?B?UzRHME4xMWI5dWEzVWFGUDhBZzFNUGxwcUJZOXRzcElpNTZnaWZkcWgvVGha?= =?utf-8?B?eEhGTjI1cFdnTGRpZHVNVzdZS1hJcU5FTjIzTFRybkYrN0E3Vno3QytRVzBh?= =?utf-8?B?M2V0d2hDZlVSWVhSK2p2UEtYZ3FiN1pxdjIvSmd4UEE2TXpaRjlFNkgxNWlF?= =?utf-8?B?blV1a0lyMnc1UnRjN1Y4Zks1aFJRcm5VNjBQM1U5ekMwZUNTZUQ5QzdkSWNV?= =?utf-8?B?Y1FNVjMyNlY2UGtzaVhEWW9sZmZRL1ZTKzhNNyt4cjVGcDczelZhMEtVSFNv?= =?utf-8?B?RU5Cb1ZjRkhvalVlaGd4Wkp6UE5ZaE1tdllaZVh0MUJOT0E5MDVkOXVlYUNa?= =?utf-8?B?dUgrQlBCN1pXRjYwVUROZFpCcHhhMkV1dXRHdm9MWGg0U0xaS2s4Y1NNS21I?= =?utf-8?B?czJHK1g5ZFgrZ2F2emtPU1QvWDE0V01PVVZIQllxZ3h5MXVwWHhDNlc4UTBX?= =?utf-8?B?VXRDN0o5TXMya2l6cWpLS3oxb0ZZZENkdStmQUZ4dmZjUVJBSVZFekhYRzBv?= =?utf-8?B?bFZtZHVkMGNqZTQzOWRSU0NaeG5KYVFWTTNEekNlNU4wbXZyTkNFRHRCbWFr?= =?utf-8?B?ZmJ5aG9nQTZkVmhRRnI2MXIxMks5MDU1bDNHaDZZTTNzaXAyUW54ZUVtbEw0?= =?utf-8?B?V3pSNzVVckxjVGJDeU5LMzZvM1JTbzc0bzI4amlCaXNHckJmamI3VFJ1QzN3?= =?utf-8?B?dEI4bUFLTmtkeFlPZHY1YVZmbGttTjQ1UVcvNkkzMGxva05reWQ5UVVBWjI0?= =?utf-8?B?SnptZS9HVUlsUTdsNHZVaTdrS1VlTEdHb3dNNFNLbVFUeHBzRTZ6WGEzS1dM?= =?utf-8?B?NUkvTXhSbGFHTllVSDNZQ1plc3VyVS9FYS9KV3phbzRnenVpZFkxQWIrVlJY?= =?utf-8?B?RmZCYlZ0UFNybHBHU1Z6TC9NS3o1MEoyRWYrM0hyN05EZXBxUVZ3c0NWQlYy?= =?utf-8?B?VjRVdUhBTXlmeEtzejRaYUxNYVh1V25tbUEyRjlqSmdZR3M1SGxsa1VOcTVP?= =?utf-8?Q?iYEp5FXxQ8YNbfZI=3D?= Content-Type: text/plain; charset="UTF-8" Content-ID: <3AA62F08445D9A429C502627593325AC@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 44299bd2-2d0e-422c-5c33-08de4dfe5912 X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Jan 2026 15:06:34.4324 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: wJevemlpkp6ftC2tUwEGqVIZPyoTsupHqbMzphG0ua0oZXjWWOHrh1NfnHeR7Kjmn8maXhw2rCPqqdoJoBVL2ZfAvTjrnxogELA+nZAoE3Y= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM0PR10MB3172 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=ziezrRTo; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c201::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: Ak7BNIeDi9fI On Fri, 2025-12-05 at 15:08 +0000, Bou=C5=A1ka, Zden=C4=9Bk (FT D EU CZ PDS= 1 ICC 1) wrote: > > This patchset adds proper SBOM generation in the two standard formats > > SPDX and CycloneDX during the rootfs generation process. >=20 > libre2-11 (provider of virtual package libre2-11-absl20240722) is > missing as dependency of libgrpc29t64 in > build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie-qemuamd64= .wic.cdx.json > See dependencies on Debian Trixie [1]. Thanks for the reproducer. This is indeed a debsbom bug, but only affects the mapping of dependencies. The provider package is still added to the flat list of packages in the SBOM (under the actual name, not the virtual one). I created and upstream issue for tracking: https://github.com/siemens/debsbom/issues/164 Best regards, Felix --=20 Siemens AG Linux Expert Center Friedrich-Ludwig-Bauer-Str. 3 85748 Garching, Germany --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 90623bf31851d17dfe746459fbfae86461f59b9d.camel%40siemens.com.