From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 09 Sep 2026 07:48:54 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-qt1-f184.google.com (mail-qt1-f184.google.com [209.85.160.184]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 6895mrXg031868 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 9 Sep 2026 07:48:53 +0200 Received: by mail-qt1-f184.google.com with SMTP id d75a77b69052e-52ff0dbeaabsf5427651cf.2 for ; Tue, 08 Sep 2026 22:48:53 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1788932927; cv=pass; d=google.com; s=arc-20260327; b=Gl6McXIy03mRhX7kIUSOHS4Na3lUMq7BY2rnCxGTOQMcrq2DdaO7+CdAyGjUP7tPvS qq7XJBWz6jsSXzDFOtyl8t4kwFwh2RixOBYRXPydtllQQ7/0sXn3mZtWYlGGOtdoCStp LLXgEY9aE3CjtCemUGlurfkE3docbbhdDFlnVabEQ7+/2vYLkaxG+NADiQrx9EcDffGs lGmbL+O9X1JK/+Yt801T4bDlbFex3P+S7Q01jjFcW3RatK+0ZABI5OxJa+SXm4CHleX2 vc+BRqsJq5/nsmcECZ3TlkezR6MTpNAeg42OTrHUGoKlIh5cYToq9/jvHBnvOTmInLoD fe0w== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:content-id:user-agent:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:to:from:dkim-signature; bh=nnzQG0Lwt9z9a7IKl2iZS+XbnEPMXA6J83crSHBjgAw=; fh=I70P0eY0Sd1BFWszJ7PlaugR8iS0YmUZfjoG72Vh0mg=; b=CyeGrEIcfhrKdmvr3vM15A5JXetsXQpGL+it1ioYCyvN5G8g9hwTSeNn/DJrvOOYx2 gIDcz8AnBM77F9dM+eVBm5kaqfobWHHX89z5xqruEzA3Lk7cViEe/5nf6LWrchl8aM1P QzWwpEceFQzqZDX7RaLojvNvZL4O7fwa8lHfWZ1k2aUdsF6yRE0VL2s12oL+321YXNBN Yn7v/DLyD205kQHXpNO2ow1nL+lzkTmfRE0m1fRUMjdKzyxtZ8tn4GfeqSm0yqXxdYiZ 3o923nKq9QVru2OWEpOn5PfHrPf6ZUvVdXvQfDFJGuIBy2iPmEyb9JWgfuOKgZ9oa0c5 ia/g==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v0EOXAwX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20251104; t=1788932927; x=1789537727; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:to:from:from:to:cc:subject :date:message-id:reply-to:content-type; bh=nnzQG0Lwt9z9a7IKl2iZS+XbnEPMXA6J83crSHBjgAw=; b=NnI+m9dRdhQHbi4Qr51UZQCY/ZuRgwA5BGrUGcqIXwO/0yiyushFxESAnv0aZfmOOU eL9JawWCw5hHzY5KyJryM/KedFhqNZib3xEQ+7QAnKD/kctUkBkao/s3gUyD5g7wxTD/ WRL2a3BNcedTjyQraoqIFSlGkP4PhfzU+YLcdiUmuxjo52P/2ScWesvB1LYW0IcfZw7f sK1mq+mMu9ckGojDWQwAP/taB1KKKWiTF2ohvAIdLEG8qpQHAe9SJLFkDqRgVG30QQqe zsS0ChTamDc8OCbLXn8/J2U7e25VAWCxMOwK+/2QEMRk//u1SDZ9/Ku20tro80U6aBxt uvoA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788932927; x=1789537727; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:content-id:content-type:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:to:from:x-beenthere :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=nnzQG0Lwt9z9a7IKl2iZS+XbnEPMXA6J83crSHBjgAw=; b=UB7eId4vcwSir1fY7jdBwqk72WiTbuehI0kqrODXDI8Qp8XuqYifENSdG6WZRbpDNt 2yQsvwilEkuWuTSzEssyGHF3gYDjB4ZnA/hBgmc+iTqtv1vzT988Y52tldVdFr3FNAGG EYVgPCdmegwGSqaIIM3qZcfPPDd6BjkSHZvMstUOjagcvAqrar3NJHXVGbt5Nrw1t0LE E48NPSI+wq1LkKXAXTH+JJX+ZjoWryB5dPHYs30KTv7/LfN1A+YAZDq96d8LJIRU2jYJ I8vjtcush0ahsDxSX7905DKFpoWp5mr7dwZsC7Zsmzs6/Ypks39zPHrA9mwRzRbxC3SL 4lyw== X-Forwarded-Encrypted: i=3; AKwUvBwYJJ7Ojx/7mHy1uJANIyGGk4A9Pmn3CEJpSrZvnLuRV4vc2eNi/P8PiqYg+mAX/fDE1LFL@ilbers.de X-Gm-Message-State: AFuF++nJbey8cw0OniyGByCvrOXRPDYJks3HqzkxHm4Ss4XitHp4quSC 9Vs5Q9w1YaLFWdA5dHOKqbVPU1GDqzO28QtNWX+kPhgJGjGN8OS7xFQw X-Received: by 2002:ad4:5fce:0:b0:90e:8d21:714 with SMTP id 6a1803df08f44-910476de413mr268961766d6.2.1788932927222; Tue, 08 Sep 2026 22:48:47 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="ATskLdcEwaasxO03rM5LR9HMBlXswUN8fht5gVgwJhgE0Tszcw==" Received: by 2002:ad4:4e89:0:b0:907:5460:601e with SMTP id 6a1803df08f44-9103ee14d48ls87954006d6.1.-pod-prod-01-us; Tue, 08 Sep 2026 22:48:45 -0700 (PDT) X-Forwarded-Encrypted: i=3; AKwUvBwNA2h1b9wKfFYBTDZeoER3SRYo6Ku0z9K6shE04OkPQmjptox0JM4xkHfzeRRPjFgxk9JUmFfNEXKP@googlegroups.com X-Received: by 2002:a05:6214:4348:b0:910:3451:5802 with SMTP id 6a1803df08f44-9106b42df29mr65258596d6.32.1788932925420; Tue, 08 Sep 2026 22:48:45 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1788932925; cv=pass; d=google.com; s=arc-20260327; b=ktUWtz7fkxvgSbzoaVoV4a8FDlD+XDB6o0J2YYJ6D3PYCSRoGxrK3UHBuawEYO2Ja5 GWjGvx/4i6Ak7l34rAVk6rprISx3QlbMUivnZp2ZX3orurNr3+Hg8KcgNFFCS6JvYH6L S/iYr5oDfeKPjq6k0YRwnXyBLq4E2iaYquLszEMWimQF03RxEIc6HGzcAXHOueici8gd TVfLR/wP+j/DE15JEGmGxpxCuJixMwyHcEfJit3HKo2SISNftura1Gdju/dG3ok+4pMc VSYJe5HsRMmqDpuelTstrDjlAjSF9V5WpjCT0W48QJQsba8cDh1PnNChif8GyP77kn1X qB9g== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20260327; h=mime-version:content-transfer-encoding:content-id:user-agent :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:to:from:dkim-signature; bh=N9sI1hDVHuEqgDF5GGqyj/LAXWk9M6sxQdA4pSrS7Pc=; fh=HV/J2urWgxET7RxDbmAUlCduKa8iHeOl0nNRzVX6qpA=; b=iCoxNu+rWGWzNCN/JMryqc9LgjbtJeak3sYk7Zq5IkaHn+VqaXlr7l4kpq1VLW6F1r DRkITtGeRFWH/18vLLP48MDFZyr3ic4THzUudlOyl2mWCnIL+tURqm/XiGqjfj7Z4hB8 ujVbcqtqb2oTmuH41Ni3VWHfAzljEqp+/oBZaIib4zi4TcemWtzAJVEvjFlhPXlLDgQS ZJWoLbmNulixR6X1Rg84fWOLciSxnRIVAebXzd34jk0l24nAS6OkCYcKUWgLgrZI6o9/ awuLxz0pw7nRtghVh5eVkpPiZJ18vpN7aHgnu9+AUPfvjlW581FTditCxUSeZAbxZ8qq 4q/g==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v0EOXAwX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id 6a1803df08f44-9104073b80esi4886886d6.7.2026.09.08.22.48.43 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 08 Sep 2026 22:48:45 -0700 (PDT) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=AsSId3ndp56Eq3QeRVHRUw3Trf8Qij0Jt5X3DrzWd0D8hG8Qg70q4x19HwBhsiSzxY+TvVG0KBnW3TH1JO5HforOdyvFd1YIwPh8oXQXXCaqbMNFs+70fuLSEEJygeDxUPs0dpM5DUc03GhfQJcZNmumTmvEYV1os196SqK8vwxgrQrRlVMMmWHD1V2Si7cRApUrW8o4AACInxdilW8QQHLtS5VECdcO/RWTkokkHOulfn9csHV1oTWEOQHICfbnfwdZ8HJlGxTkaV+iXNe5n513tJco8VdjwC/rIQUKu75sTkmMoXmYeyy13iRp5wacPBkDD0zAJfqt0tLHSAU5dA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=N9sI1hDVHuEqgDF5GGqyj/LAXWk9M6sxQdA4pSrS7Pc=; b=WKfrjHsj0JZOvtkjaoy4tvbm8Ci/3Q8fBQN3Uho/Xi0dTXGqtDFGw0OsJQIPKIDuKLGvWJ37Hils/epg30nzFG7TZtVyDADOvc3OyW44y856vanVPIB9IB2X+0Mofh0NUGMdrW944p/mAg53Sn6BHUJVWrd/lcFROoO7VVJEu3A/cDzdgtCrAOZ5tUIDmfxrLgvdZ6lcQcFEBczZ7d0iGflj/DrmVItKBrtDQgEkN+qHBZty8zNX5jeNO22ce0r7lyv1TF2HSveZmtc4ts10Pl8UpitGyvB//UhWx4NwE0KfNUWFN/rEvjONOPJKX10hy/bGxnZvyAZ57HD5ltavxQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:17e::10) by GVXPR10MB5885.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:68::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.406.7; Wed, 9 Sep 2026 05:48:41 +0000 Received: from AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c]) by AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM ([fe80::c54c:ccd8:ebbf:477c%5]) with mapi id 15.21.0382.007; Wed, 9 Sep 2026 05:48:41 +0000 From: "'MOESSBAUER, Felix' via isar-users" To: "Steiger, Christoph" , "Bezdeka, Florian" , "isar-users@googlegroups.com" Subject: Re: [PATCH v2 2/3] debsbom: update to v0.10.2 Thread-Topic: [PATCH v2 2/3] debsbom: update to v0.10.2 Thread-Index: AQHdPsWpnBU+ZkSiYUW0OnZLB6/TZrbENO2AgAAgp4CAAWqcgA== Date: Wed, 9 Sep 2026 05:48:41 +0000 Message-ID: <9b5e7cb996bb7a5dc0511bb0954ed46faf965621.camel@siemens.com> References: <20260907123728.335093-1-felix.moessbauer@siemens.com> <20260907123728.335093-3-felix.moessbauer@siemens.com> <04bc2bac7156f18bfa79cb10feb0fdb323b54a6a.camel@siemens.com> <500c99d3-f548-4780-975d-63ee29d475cb@siemens.com> In-Reply-To: <500c99d3-f548-4780-975d-63ee29d475cb@siemens.com> Accept-Language: de-DE, en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: user-agent: Evolution 3.56.2-10 x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AM7PR10MB3956:EE_|GVXPR10MB5885:EE_ x-ms-office365-filtering-correlation-id: 26db402a-6fb9-4e21-d223-08df0e3600c4 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|23010399003|1800799024|376014|366016|4022899009|10067099003|6133799003|3023799007|55112099003|18002099003|22082099003|11063799006|4143699003|56012099006|38070700021; x-microsoft-antispam-message-info: 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 x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(23010399003)(1800799024)(376014)(366016)(4022899009)(10067099003)(6133799003)(3023799007)(55112099003)(18002099003)(22082099003)(11063799006)(4143699003)(56012099006)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?OVNKTXIrdUNLR2NDV1dhVWJCdG5ibi9uWi9hREw1YmMrUXZFUWgwN0tVSzBO?= =?utf-8?B?TXA3cDRWb2p0cXd2M1J4aTJnUU9uVmhOS21oeVZyVWlyRDBWV3RVaFNVbm1O?= =?utf-8?B?cloraTk0bEoyRGZ6VWwrWU1nWGJ6c0ZvZm5IbEVqUmNzOFV3ajFHNGloWnpq?= =?utf-8?B?VVJhRWpCZzhlYzZaZU5BSy91ZXZta3NoNVVIa2hkVGtFWUROYnN5eXM2OGwv?= =?utf-8?B?N0JWMGQxZ1VhTlNiUWZKN3JqMUJLVUJxTm5qeXVxVjh4azF2TUdEM0lRM0JX?= =?utf-8?B?cUU1QXUyUUNiQzNGcmtyVjk1S0hsS09PZWJjdjg0Qy9uZitIYmkyb0ozWVdj?= =?utf-8?B?dzhDbk1sR2UweUxQUTNYSkJ6MXZUSnM0MWYxVDJMa3pMUnpvNnVQMmpUc2c1?= =?utf-8?B?b1NGWlQzUW9XRE9DMGt5dFc5NXcrV0NndXFTa1QrN3JmUUkreGZQZzVWR2Fo?= =?utf-8?B?QWYzR2grbzRFZFE2djBuemlrdk9QKzkwUjZ5bFB6UmNYWGNVaCs1OC9KVTJv?= =?utf-8?B?MmQ0ZEpMZXRUT2JDVER3cmhGYXFua2VmR0VNRUEzZ245bGtvbnJaU2pURWVr?= =?utf-8?B?cVA1VHkyUGIySUlCa2JwcnNtZktUeGV0cjJ5T3lyeUUwTlo1L3ZJdEdwN0tE?= =?utf-8?B?ejdCeHJ3eURlc0tWR1dOQWoycFpMQUlpTnJwN2U1SFJoT2YwWUpramlkdVMr?= =?utf-8?B?Q0dOL1A2aU1LMlBOV3h0aXBwNTlndmhHQWRNclR2N05SY1poN04vb0ozNWRn?= =?utf-8?B?VFEzZUVlMVZxMS9YRGNwR01WZnJVNXV1cDAzdmovajBOd29Pcy9VSUpKSkh6?= =?utf-8?B?RXRJNGNGZk54bXJVZG9GZGNCZDJZQlh6T2J5YjF4b01NSHpMbTdvR3lvYzVo?= =?utf-8?B?Y1BqS1NVa0ZRTWtFa1FXckYyTG1pd25DcnBGdTB3a28zVW1TQ2VxWG9NaHRv?= =?utf-8?B?OElERkd3WUlyNkxJck9Ja2hlbXZIOStJdGRDbnFzQ3JSelVYRHZic1g1alZq?= =?utf-8?B?QWJnZFdGSVFBczhCNzJscmwvZHRGR0tRSTZwNWlzNUY3QURmQ2FpWHhwd012?= =?utf-8?B?YXFZeDdzYmtQYVNvWjhZNFE2cEZuYnRIOXU3cmkvTm1sU0lYYXNUU2dnUWs3?= =?utf-8?B?aEtBMjJhM1pRSWVNZGRTNkZyR2NlL3lQbVBQQ0U1d0N2MXgxS2taMUJoQlJF?= =?utf-8?B?SXZIZkFGOTVmdjlaZ200RmpkNzZxemtuMS9QSm1vMmlrUWlSZEdGYjZZRisz?= =?utf-8?B?Tk5uTjUrMWcwdWh3aU9Ec3pCTE1BZFlwT2tGSG9YWTFUUWU1SXhiSU1MbnJi?= =?utf-8?B?RkFHNmJ4aDN1cmR5TFRWaHFzanZFenpvUytpZjErWmZPWDJRNW9lc3M4U3hQ?= =?utf-8?B?V21IWlJXUzBNc0x0bk1YdjQzOFBmZ3J0S2M4bmpuWXhGNWZiRi81c2hCTW16?= =?utf-8?B?STh1bEV2V3dtZU9Xc0JRTWI2OFNHeWd2Y2tGOU5ocWxCa0oyTVNycHVVNUZB?= =?utf-8?B?d3VDejl1OVQ5bStleDhpUW9USk5iMFQ0QXI4SVVscVBCK1lWT3cwNE8rOXJr?= =?utf-8?B?VzBlczlPZEdpSW5FUm8zRkw5dElmSFNFdmZiS2ZGSHJ0cGtobWlrVGV0b3JY?= =?utf-8?B?ZFVncU1EZEJIdm90UHJDRWJxbnVyQlJSdFRSUklGNHp3L0VYQm04K2VEd2hB?= =?utf-8?B?Smd1NXFOMHJ5ZDJKQTluTDNUZXQ3SEt4T0VVdmowQjJwY1RYY2RWcDljQkJD?= =?utf-8?B?Ym5HV0NWVTVNTnc1Yk81MGFXOUlMSjNtbE16RGJTMUxBV0lRcWowQnNuTUxJ?= =?utf-8?B?MnA3SldZN0s4ZWJ0UDdiemVET2J2elRXc3FVUlhDbVlHVWdxN1h5TDJwQzFl?= =?utf-8?B?NjNJMmlMQjlYaENFcUdEbFBIcXZPb2hBYlVzUEF1SGswbEU2K2xoNCtLZWpx?= =?utf-8?B?VUNlN21RdUNmUzZCc2pDVld0WlczNVBOQlpFMU11UnE0Z3c3NnIyM3UzdlFT?= =?utf-8?B?UW44bzY0eG9pT1Q3TVlCZWNvQ3dtVUNpbEZYRVJIOUlkK1hCOTlLVnNIbmxT?= =?utf-8?B?eW1zRkVZK1JXNXFvWm1rVEdwRjNIZ2JCQk9JclUxN09iODkxa1l5YzJJY2Vy?= =?utf-8?B?aCtmVkZ0S0xudCsrVzA1NDRGeWZDaURjWkhMSm82bm1ldXUrN1pYbHpiYzVJ?= =?utf-8?B?OTNIczF3NFZKSytnK253NVg3UHczZFgvcUJXUUZMSGFiTGxINDBvRElYWXRO?= =?utf-8?B?M0N2cTlCVFFpTTgyYWhBRGFCa2pwV1VjS2NQa3UvQXNkVHZZMWg3VlAxbkYr?= =?utf-8?B?c0FoN1dsRTdlN2RybXlWK3g0aGR4N3ZqTVNvVFU3Q052d3lZMVE4Zz09?= Content-Type: text/plain; charset="UTF-8" Content-ID: <1FD5F794B051134EA23393A51B05F215@EURPRD10.PROD.OUTLOOK.COM> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AM7PR10MB3956.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 26db402a-6fb9-4e21-d223-08df0e3600c4 X-MS-Exchange-CrossTenant-originalarrivaltime: 09 Sep 2026 05:48:41.3440 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 9C/AWfBwZ9caI8RLkyMlwlz4blJY8lN5qNb78DjX9DK2TJpUerNq9au4pkTfQnU5g0XVsJHrZD9UFtDJNBoyKKl6H2JLrY4spVT4LnYNT+8= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR10MB5885 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=v0EOXAwX; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "MOESSBAUER, Felix" Reply-To: "MOESSBAUER, Felix" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: ybDvB+1HepsU On Tue, 2026-09-08 at 10:10 +0200, Christoph Steiger wrote: > On 9/8/26 8:13 AM, Florian Bezdeka wrote: > > On Mon, 2026-09-07 at 14:37 +0200, 'Felix Moessbauer' via isar-users > > wrote: > > > This brings a couple of bugfixes, as well as support to read the pack= age > > > data from a tar file. > > >=20 > > > Signed-off-by: Felix Moessbauer > > > --- > > > ...bom_0.8.1.bb =3D> python3-debsbom_0.10.1.bb} | 2 +- > > > .../python3-debsbom/python3-debsbom_0.10.2.bb | 43 ++++++++++++++++= +++ > > > 2 files changed, 44 insertions(+), 1 deletion(-) > > > rename meta/recipes-support/python3-debsbom/{python3-debsbom_0.8.1.= bb =3D> python3-debsbom_0.10.1.bb} (95%) > > > create mode 100644 meta/recipes-support/python3-debsbom/python3-deb= sbom_0.10.2.bb > > >=20 > > > diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.8= .1.bb b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1.bb > > > similarity index 95% > > > rename from meta/recipes-support/python3-debsbom/python3-debsbom_0.8.= 1.bb > > > rename to meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1= .bb > > > index 7fc9a8eb..fa0b9b38 100644 > > > --- a/meta/recipes-support/python3-debsbom/python3-debsbom_0.8.1.bb > > > +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.1.bb > > > @@ -35,7 +35,7 @@ SRC_URI =3D "git://github.com/siemens/debsbom.git;p= rotocol=3Dhttps;branch=3Dmain; \ > > > file://rules \ > > > file://0001-Use-old-license-description-in-pyproject.tom= l.patch \ > > > " > > > -SRCREV =3D "a76d4e784f84e73b98d2bbeadd28c602a8c13708" > > > +SRCREV =3D "00c7cc8b8984251e17a716b14602d20397724b59" > > > =20 > > > do_prepare_build[cleandirs] +=3D "${S}/debian" > > > do_prepare_build() { > > > diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.1= 0.2.bb b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb > > > new file mode 100644 > > > index 00000000..1aec1369 > > > --- /dev/null > > > +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.10.2.bb > > > @@ -0,0 +1,43 @@ > > > +# This software is a part of Isar. > > > +# Copyright (c) Siemens, 2025 > > > +# > > > +# SPDX-License-Identifier: MIT > > > + > > > +inherit dpkg > > > + > > > +FILESEXTRAPATHS:prepend :=3D "${THISDIR}/files:" > > > + > > > +S =3D "${WORKDIR}/git" > > > + > > > +DEPENDS:append:bookworm =3D " python3-packageurl" > > > +DEPENDS:append:noble =3D " python3-packageurl" > > > + > > > +S =3D "${WORKDIR}/git" > > > + > > > +MAINTAINER =3D "Christoph Steiger " > > > +DPKG_ARCH =3D "all" > > > +DEBIAN_BUILD_DEPENDS =3D "dh-python, \ > > > + python3-all, \ > > > + python3-setuptools, \ > > > + pybuild-plugin-pyproject, \ > > > + python3-packageurl, \ > > > + python3-debian, \ > > > + python3-requests, \ > > > + python3-zstandard, \ > > > + python3-license-expression, \ > > > + " > > > + > > > +DEBIAN_DEPENDS =3D "python3-apt, \${python3:Depends}, \${misc:Depend= s}" > > > + > > > +DESCRIPTION =3D "debsbom generates SBOMs for Debian based distributi= ons." > >=20 > > Hm, debsbom (=3Ddebian sbom, right?) has no upstream debian/ directory?= As > > the tool is part of forky that means someone must have done a the same > > work already... > >=20 >=20 > There is an upstream packaging [1] which is also maintained by us.=20 > Unfortunately debsbom is only available in trixie backports and not at=20 > all in bookworm.=C2=A0 >=20 While debsbom itself is available in trixie-backports, the python3- spdx-tools is not. By that, we can only generate CycloneDX SBOMs in a pure Debian environment. For older targets like bookworm, we anyways need a custom built in isar. As the debsbom tool runs outside of the target chroot, it could also be provided as host tool (e.g. in kas-container), or in a dedicated (forky) chroot. The latter requires multiconfig for all targets that want to have an SBOM generated, though. > When we introduced the SBOM support we needed to=20 > package it in isar since it wasnt yet packaged upstream and it has=20 > stayed like this since then. We will at some point probably just use the= =20 > upstream version. While we could use the upstream packaging, it would significantly increase the build time due to additional built-time dependencies (which are optional if only supporting debsbom generate). We could introduce build profiles in upstream to reduce the impact, but I'm not sure if it is really worth it. A third option would be to use Yocto's buildtools feature [2], but that is currently not used in isar at all. For now, I recommend to just keep the packaging as is and just update it from time to time (only needed on generate related patches). [2] https://docs.yoctoproject.org/dev/ref-manual/system-requirements.html#downl= oading-a-pre-built-buildtools-tarball Felix >=20 > [1] https://salsa.debian.org/python-team/packages/debsbom >=20 > > > + > > > +SRC_URI =3D "git://github.com/siemens/debsbom.git;protocol=3Dhttps;b= ranch=3Dmain; \ > > > + file://rules \ > > > + file://0001-Use-old-license-description-in-pyproject.toml= .patch \ > > > + " > > > +SRCREV =3D "9b5a5d6be05f1207356223f88b3080bd72722b9f" > > > + > > > +do_prepare_build[cleandirs] +=3D "${S}/debian" > > > +do_prepare_build() { > > > + deb_debianize > > > +} > > > --=20 > > > 2.55.0 > > >=20 > > > --=20 > > > You received this message because you are subscribed to the Google Gr= oups "isar-users" group. > > > To unsubscribe from this group and stop receiving emails from it, sen= d an email to isar-users+unsubscribe@googlegroups.com. > > > To view this discussion visit https://groups.google.com/d/msgid/isar-= users/20260907123728.335093-3-felix.moessbauer%40siemens.com --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= 9b5e7cb996bb7a5dc0511bb0954ed46faf965621.camel%40siemens.com.