From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Wed, 14 Jan 2026 09:51:40 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pj1-f55.google.com (mail-pj1-f55.google.com [209.85.216.55]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 60E8pcZL032252 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Wed, 14 Jan 2026 09:51:39 +0100 Received: by mail-pj1-f55.google.com with SMTP id 98e67ed59e1d1-34e957c6302sf2420939a91.1 for ; Wed, 14 Jan 2026 00:51:39 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1768380692; cv=pass; d=google.com; s=arc-20240605; b=DVcNwHf86dWKdNff3HQ5dCvnFeA5rFWJ5YuX431Z+/N6fmeBKLBF+iFb6+xUUhx1yS cJuD7NYm59lUQe8ulgsxzMCVY0nvXfMFzE97xqTDlYE7JJnOFw0sZyCbY8TCUP5TGxe+ ETzBGcPDCjqZq773rF0kG05u7Jv7cRsgKcLSe7OdbfWpM4aja6/RaBP+iEp22pbo43Ee mqCcTO87QeZJ+Wm8LqqwrkYxu3rm3XsYv4681eV6//eCTfdRsDiF+GlT1Yi3M7NmmnWC 2MhqMaecIh5cIBbjQsq+tI8rLTEnlzeEHX5mOpXBNhAbwWxn9LvxFOY7hZJ7/TsaPcwH ajKQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=ESDPYVojFUYLNJDe++ZLNlehfowZrPJPlYidmvGPX0Y=; fh=7QwRSN4Bs547f39W4fLwfSci+lFPluoSZ11gzYJcXQo=; b=HB7wRUHVsiJg/zFVnKnECa3oe4ZiD6aJxrflH6lXLgyMHWn1ga94XaXMTJfUYFK+p1 3lWQt2909l9kIuMVabScccVMWPYiddtv1dE5DaowZuc1nlD+0k7CwjVM69DTbBy8feww oUuo98VsrtSh67PfV6tKwpxtNuYcRs5U6V/xmeiTOlyHi22ZeuPHQtuWjVs5llAeeY7g HFm1vmFiKXBHVNvqk7JBJg9aOxx1ijdzBAY3KcIvNMEmiCVvuRHuFx+DSxHBDvso/3MS AYpbVzHCAyPVQ3mihUi5V6JjQ5Gle3kdyBNPu+0ERNVNj1zLCmEnhw48B7/WpUFgMyAa iGLg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=rTN2nBtd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1768380692; x=1768985492; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:from:to:cc:subject:date:message-id :reply-to; bh=ESDPYVojFUYLNJDe++ZLNlehfowZrPJPlYidmvGPX0Y=; b=SMfu3CSOzyBh4XxMnK39CxTOudppZqdVJWoUZIo1aCvJ9gmrFjWLxKZaa1paUUnedO RKCOD/utDv9wyXRmaf+Otiv8NwiRDf/ZSCtkBlObDqJNBVMHwz67DD10bkNiE79uVscl xCBtZEo8Swfq+Df3chyRk4QAoEdhEeSmBzTrFAEikFCnJjzknyv8odj7ZWI83igWsPDC +Z85hLmPYYgjtW/5HM/AyFe1SJE27Czm+XS4bOOz843Oofxkv2I2xntXv3E4UYh4P847 L0YIcIh9HUskZTyA20AqQC87PoKONfRRs3gwg90JC/ZNu4FC6Tvpt2U1kXcSYNBGYtjH UT7A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1768380692; x=1768985492; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:x-beenthere:x-gm-message-state:from :to:cc:subject:date:message-id:reply-to; bh=ESDPYVojFUYLNJDe++ZLNlehfowZrPJPlYidmvGPX0Y=; b=VNydmDG88DM8X6Zd/rXdNywRCTyJuVuIIJBGLCFNEZUAqs9aXbnYASXoaNQatngBOp PkYJx6BMTz5pWzYBYLeKxZqRfVFWMDw7w1kHLkgpgX/C3dSI6+bZ5qL18OsOhnYAFQT4 4ISnWWrUS2jZMZ52Zaipv+zUPAaV1ViidF6egr+PHXTo+pKo/pwsG7LwQBH9yfTOGutV swWxG589RuOR37cWIIIzfwqQ4aGMYaE27oCSatl0iomQUw5pFXtv+FW+erygbrbdVWsz SpFEILF6LgVC/1rkuRPHqj+Os70lFeUNv1B2oTq68lhbTWMST2K2+oCyjY9MQSoYFBaK k0DA== X-Forwarded-Encrypted: i=3; AJvYcCVkmrE8Aa96snfQ14m1pThOpkWs3Xn/s0Femqo4X3JhB1rf5l6h6FkQG/Qqi1zA/3xiU7VY@ilbers.de X-Gm-Message-State: AOJu0YwAuAWEbtKdBZE7fJB/WXhVKwM7asWNv6FkSTAqhzsHEDE9kOI7 QjYSVv7wACen+o4rXNA+uQicIqvNaQwIBMk9U2310kDnnOIFBlmLCtHV X-Received: by 2002:a17:90b:58cb:b0:34a:b4a2:f0b5 with SMTP id 98e67ed59e1d1-351091527fdmr1456525a91.5.1768380692072; Wed, 14 Jan 2026 00:51:32 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="AV1CL+EHff5F/29hlyCJGnInrqAoiqUcU62tFP5mpW+c0w+mMQ==" Received: by 2002:a17:90a:6345:b0:34c:3502:8adc with SMTP id 98e67ed59e1d1-34f5e955b49ls5903584a91.0.-pod-prod-05-us; Wed, 14 Jan 2026 00:51:30 -0800 (PST) X-Forwarded-Encrypted: i=3; AJvYcCXYxOsQDi61KGbpBuZwkSFz3EFNIXm8vsmz4AEsuH28KlbtztJ+WN11VY4JrbwxcYN7X65VY550ASzB@googlegroups.com X-Received: by 2002:a05:6a21:398a:b0:38d:e87c:48b3 with SMTP id adf61e73a8af0-38de88b982amr101815637.2.1768380690532; Wed, 14 Jan 2026 00:51:30 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1768380690; cv=pass; d=google.com; s=arc-20240605; b=KDxHYl+qsqWA/Ym9DBNltbg3TKXHOnndYlPLM7iWCqoBjVOYaEBtR+2LPq7RjfY003 Abyh9eiBcmXM3OZRvxOvQPP0mGc/Yx/ZDjPGZmK8mjlt7jatXAq9uFg1VUVlIbIgdNW4 HtaaUKV9wV5cdR7gMRO5tMItQgxiFC9iJFfeaRZ0v2OFxSkbKAM5/JWmspoetwX+xo+/ CW6cg0Ao54YUJsnY7iadxzCq+JAeP7MpunAQdVqpy7rcn7Pdox1Hb2HyfA7fZ8eR8Hm5 Jz9f7CHaNDh0s7rist1lAH6uK6JHrI4m/JX0PTfTcxIGzjd7kaGO/J9DGnXal/Hw9eTX hBNQ== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=5rZ+euJhdxbg/W373CQh96iIU83rBUn3fQkTHxfT8Os=; fh=kuKe3oZdlvD+gS7fOVuQeFiyzLEJYqCA/jIMAZ5+W8Q=; b=MEfE65AePLj3kuMREeukhLXdkswMGwqXvzQTBhH6IMcpIyvcJwxrouWYxOXrbVKKtq nKzncFaA86GMEhvGHOdMwusQBjSDoCM7Qg3Bj/TKX9mvjzmyts/CiEK+rWiogfJZIqnn M3JhQ5dzElzTaK/zbb6P/7xZAah8HCe7AIUl/IGLXKykEr0Bp3CmibFEWSYP6YpDHoej O/RVIxzp1KXJ9D3pQhI78Dvc3YI4aGQRc1Qg/rydv57Guc9xkDTZ5HRJkbmvaLHhwxjn IuM5LaqD1UrWd5x0kr/H1HLG8ez8wLIn5yvjGz6Jx6uXe/beZu6R/fSzWf+Khz1dZEGo vwyQ==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=rTN2nBtd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from OSPPR02CU001.outbound.protection.outlook.com (mail-norwayeastazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c20f::7]) by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-c4d93b595b4si715074a12.3.2026.01.14.00.51.30 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 14 Jan 2026 00:51:30 -0800 (PST) Received-SPF: pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) client-ip=2a01:111:f403:c20f::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=w349dN7Fffh7xsP1tAcgUa6PCS+W5j2qfP4F7OJAMCCosOs7YJE+aAwh8OJs3BrzaSG1sGBmIPrF3n0RiZMsHX6e/sR1QvvWGU7MzBsele/Pn36+Rxy9HJLqpuOezifJNtMQiZkAnWJtVBJ0OKE9UI0guOfWyhg2Ux7xE/bdNDv2crH14cPlsEHIjIswRasPgbi3lcIMQer6rFnl4oIU6URg2gL3Dc8UaY3Xog+6yPgnlvv64Ji2Axo815E3xKkX0RySSivblHWI30pjD2WboiQNxJvNrHJWY2UoUEWOf1akBjb3/Lo+Kn6ZYrBvYHuufM0q54KBPaO8Af0bbYP62Q== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=5rZ+euJhdxbg/W373CQh96iIU83rBUn3fQkTHxfT8Os=; b=xeiAsgWC63VeyvYpQ5ghLxiyAdDgPrWsWb69me56LFYy1i2Ngy54Tu0wauYzxvQDFEukwpNhgZEwMOj+Wte5rUYbT8UoumTN34LtvoW6txZlufb1+cL3h3NrKwIOla+nnHCyzE8fhubJLdH7ss5NMPzG9QoJMqkUJ51GH0Yc3JmlyCBZbSBF2nKt3zMIFEcWSQM25uN0tJ1CWo9Vw/c7aoMUlqGXb4BX8i0EyjFDs+exdkLEH3mQNWZvcIWqGizKp9ORbd8t7q3YKzkG0voMrncFF/cJ+7gD3OmzTzS8l+3WHqc8DbKWl0oF2p5Pg4Cip+9ZGx02mNSfM+QEOf1Msw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:47b::22) by VI1PR10MB7636.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:800:1c7::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9499.6; Wed, 14 Jan 2026 08:51:25 +0000 Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::1d4f:886d:a78e:710]) by AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::1d4f:886d:a78e:710%5]) with mapi id 15.20.9499.005; Wed, 14 Jan 2026 08:51:25 +0000 From: "'Bouska, Zdenek' via isar-users" To: "MOESSBAUER, Felix" , "isar-users@googlegroups.com" CC: "Steiger, Christoph" , "Gylstorff, Quirin" , "Hombourger, Cedric" , "Kiszka, Jan" Subject: RE: [PATCH v6 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v6 00/10] Add SBOM generation with debsbom Thread-Index: AQHcYqCyCkBYmOJUFUuunORJk8shkbUTKW+wgDPfvACAB4hxAIADDAfQ Date: Wed, 14 Jan 2026 08:51:25 +0000 Message-ID: References: <20251201085813.1616095-1-felix.moessbauer@siemens.com> <90623bf31851d17dfe746459fbfae86461f59b9d.camel@siemens.com> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=7c812a93-f016-411d-a959-14dbb7d2a641;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2026-01-14T08:40:33Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Tag=10, 3, 0, 1; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS1PR10MB5675:EE_|VI1PR10MB7636:EE_ x-ms-office365-filtering-correlation-id: bf14f6ed-e372-4f2b-a806-08de534a1973 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|376014|366016|38070700021|1580799027; x-microsoft-antispam-message-info: =?utf-8?B?VFdndmVBQ0t6OGxvVldFZkdxRTllK1kvV2QvQzQrMit3Y1Y2cDVDaVp3TE1i?= =?utf-8?B?OXdqalV0Z1pHeVMyUmpzYWZXb3BJMWg3RmlNeDhBTHdrTTl0SGowZElGK2Rm?= =?utf-8?B?QUdFblFkTzJ4aTJSdllNOERyZnBYOEVyd1pjbmwwRjV6b3NEK09PckQ2VVcy?= =?utf-8?B?L3Y4K2p3dDN5S0RFY0w5R0gvMndaVU9McVl0Mzg0M0QvYTdyOUwxREhIaXZH?= =?utf-8?B?aWhaaEVPTXc2MzBsNlVWRitYM2pwS0FXQ2h1S3FLK0tKSzNYV1YrbXZ2SGkr?= =?utf-8?B?YlplSitXRnlneEh1MmMzb3FTdzVIa082UTNjVFZnb0kwNWFNV2RlN292Rzhn?= =?utf-8?B?enNwRW9WRWpXZGdYa0JDdG90eER6WVNLU1ZyV3JMbzN4eGdnTGR1ZnFyemcx?= =?utf-8?B?ZHkvaUpLQWtDMDNlczhrUitTUFVib3BYL3NaQ1NMTW1LbGZOTFhHZ0pYWTk5?= =?utf-8?B?emQ2anJ2cVBJN3paQTBRQlJtLzA4OUphUFo4MUtONWZJaG1kcW11K3ZDOVVu?= =?utf-8?B?bFkyZTQrWEdHd05FNHJza1ZpQ3NJV3prSDROd3A2OTV3Mld3QnNwODk3cnk5?= =?utf-8?B?RzZ0RWYybmRQWjF6bFhlbG5KMkhlM0laejlsVG45eUVlU0JBcjN5ekZpM1Fx?= =?utf-8?B?RkQycmlxWmgyZ2orMFpScFhXaWNSN0c0RG1IWnkvTHlHWWNSL1VnL2NZbDNW?= =?utf-8?B?dVdsR3dBWkcyYk9DTUZrQlB6cWlSbmY4VWgxWDgxL0JibDFPbXlyK0JJcklt?= =?utf-8?B?US9uYjcvK0lUeTduR040UXg0RjF0dncrNWdYL1dXM1pISXVYczlDUWVvZnpR?= =?utf-8?B?TTFPVTltQnlXeGxmdnk1TnU2MW9wbXYvTlBjODVWNmloanVHWmE3OVVnVytl?= =?utf-8?B?NzhteG1rQXB1eXJ2UDEwaTRsNHVVdktWdGJEakw2QUhNVFV4aFRzeklZWHRV?= =?utf-8?B?K1VJQzVFQU5rVld2R1I2WkRwdXdzdHBKY0JtMVcwL2g5UHlYZkJpMlB2bjFF?= =?utf-8?B?R1oxU08xVENDL2xjNHdOelZVSG5pTUsrVWdDeTJUbFdQZ0I2RHgvSDlNQWpD?= =?utf-8?B?ZnZpWDZSeGtacnFQdlhpS3VoWlB6ZWhINExaS2tzeit6RmpNMjNEdFgrMU05?= =?utf-8?B?dFlCdmFPbFcyOGlsT2RvUm1NUHV1azFzZ2tTckJkWUZMVzNld3QvRXE1WUxC?= =?utf-8?B?a2Z4djJ3UVU5anJOYUhxdkp3bFdyZms2WHNMUWhvdCt3Zk1zZm00MzRGTjV0?= =?utf-8?B?a0ovcGxHWDdMQVdleDF5ekg5c00rY2VJNVVWMUpwTWVPRjFUeGlhdUFsRGhr?= =?utf-8?B?Qzd4UG95ZGtOWERWMGhSR2t3S2tKUVhrempEVXJkTElhVzdmdDFaV2lwalhE?= =?utf-8?B?ZDQvVzc5aVlUeDBmVTlEZEpzMDBva2JxWHVTbHkzRytGcGI0am8xMWRpaWZu?= =?utf-8?B?YUZQWU1Ma0ZXL1g0eS9qdG10aGgrbjhUZTJ5ZVFSL0ZkYXFhektnYlpyRllW?= =?utf-8?B?aWlnd0ZlMDhnOHpwaUhvUXg2djdkaHM4dFFEOG1BakFyQk02YXBTY1BUNzJU?= =?utf-8?B?QU1uS25vNVVzdEtHQXF3VksvYnRDS3FMZ0Z3ZlI3M3gzZk1kUG5ESndTSEhj?= =?utf-8?B?L2xZdDhtR3NnYnFMZFRVdldyTmluWFpqeWJObXZkRzFDODh3RWpYcEVzMFBY?= =?utf-8?B?Z2gzL2VRb01EbHJPV3BqOFFEV0V2VTJGNnBZQWRZaFFpVE02UnJXbzhEdHgw?= =?utf-8?B?dG5LY2dMaFdTeUtpcUYxaWJHN3N5bVV6Z3NySzE4cVZwUTlhV3Z4Ti9YYU1v?= =?utf-8?B?NkVySWtmTXJENG9mbFYzT2o2S1ZUTitHU0VTNGI5NjgyZjJwL0dOek1FUHVP?= =?utf-8?B?VEsxTUt1TE5rV01mM2kvVVB6cW9hSnRQWmM5RnVDYmRrQzhjVXNnZFBCTTl5?= =?utf-8?B?OUtQVnpWUUVCWEhvd0JaS1VtRVRMOVlhem5IUWIxVUFWdFZJSlhER0N3dGNi?= =?utf-8?B?YXFIdStsVWIvejY1R3NkZ2F3RmMxNVJHaFR2NWdhNGtLQXFEMUFveE96L0pI?= =?utf-8?B?bXZYUS9PaVBpczdDaitLRHUwMG9GOGZ4K0FuWWVCemNJcjFsblZXUmJqaUlz?= =?utf-8?Q?pTGw=3D?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(376014)(366016)(38070700021)(1580799027);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?Q2tXUitJTUdLTlhQdndrbEFUSTZ0Uk1qSDYyTVlxWEhLcDRhL1RsOTVZaW9S?= =?utf-8?B?Qyt2Z3RPWTRtZTlsZzhwS2I2cHpqODBlSWtMS3JCNzY5RFBDMVBVSnJ1TXU3?= =?utf-8?B?d2czeXdnSjdzeTA0WnVKbk1iak5ZTW8wL1ZoOXdjSGhRVDFLRjZ5QnR1a001?= =?utf-8?B?WEd1S0w2Z0hHcnExOGJKeGlPRnhHZ0hIbTZTQW5VMHFnL0Y3emVwY210cWFm?= =?utf-8?B?ZWVmSkRuek5sRWpYT1VlRVg0V2lacVNML2tPdFA2QTFLR0s2Vmo2cXpwdlRa?= =?utf-8?B?MkZOcVdWb3VWa0tGVXgvMmdBWWEzWXF2VkJEcTk3WTNaRkVlRG5jREJMS3VI?= =?utf-8?B?SWM1c2R5RmJlclVjTUk2aWk0SElSUlA1dTNLNjVvc2pnQllYbFNHa01rUG15?= =?utf-8?B?MHYzVEZiczVlaFdieTNxeWY2SDg2MURleW9jU1AyL3c2LzZtcjZtUnU4Qm1N?= =?utf-8?B?dFZQZUlsVUJsZDdRSFZxb2M0N0dHdFVBb0JLSkRhQS9LdTQzdk5DSlo3Qmhw?= =?utf-8?B?dkExUVZFaEREdjRTV3BXNFd5S3lEOHExYm5nRVpsOTZLOWVEZnFEbzdKZUhO?= =?utf-8?B?QUtvdU96Zzhvd2Z1MjdRcmlkaHJ0RlFnUVc4S0RZMVpKS1Frd0RYMlZjdjRl?= =?utf-8?B?MmQ4L2oxMWFpemlIQUVneWNaU1prYXZDdmNsTWRUdjJ0Uis5L2d5WThSRVZC?= =?utf-8?B?RzRJMmpLRUpoMEZ4bU0zSVJ4dFBzVDZaa3c4OHFyV1VCTkNoblpMbVh1aWFL?= =?utf-8?B?TTQ2YWNOeFhRaFlxNzgxVzJSYjRuTHdUL0JudHQzZUZsN1FxT1hxRDlKV01J?= =?utf-8?B?VEMxbUpZZDJ5WFlnZ2lkQzF5YzlQMlVwVDVEWER3WkVhbWszdXg4NStGT05T?= =?utf-8?B?YVdoT2U5ek9LUStlZ3pLbzBvWTRLb3M0TGdYT2VJNWVESWc1Wi9ydUp4RTZL?= =?utf-8?B?RVFJTkVkNEpkRmltVGVpaVJLbEErSDVFb3UzdWVmaG5xaHFpS0RaTFRnTW8w?= =?utf-8?B?ZkFWbUhmTWhBT1I5dWNVL2hERWJqRU9rTzBoekFRMlVzcG9zaUFBWllvYU1a?= =?utf-8?B?Sm1ybUhsUEZTTmZ0OG1lUHowM1VrUFJvZWJHNytvVTY5aVpWVXM5VFlaQzQy?= =?utf-8?B?aGR5ZjlhTlV2cER0WU9Sa2RnMVdTalF4Y1puSUtnWm0ybmI0TzBpaTZJcEc5?= =?utf-8?B?ZUYrQlNjTk02eWh3L2xuU3J4OHZ1NTR2NmxUYVo0MUFEN2hsWkRna0Z6NFN1?= =?utf-8?B?bEMxMkx5Y0l2bmUzREJiMnJyWjFmOGpzU3dwbWxuZFdiR2pqcmF2ZkdnZnlv?= =?utf-8?B?WlZhVjViTmt5ZkxrVGMyelVDaEJKbjlmbWZQY3JQTjd3ZVZkdUMrZHBlaFhn?= =?utf-8?B?Z1NVcTZQcms2MGZ1dzZRSWY4dzNCTUV3ekp3MFA2Q29ZNUw5TE50aGYrUjZP?= =?utf-8?B?ZklNNUw2UW14cTkzYnpBNllaUWxod2ZtVTQ5aGJWNmlBK29STXlUT3dabENl?= =?utf-8?B?WkMzeHJxb3NuVjZGM1NlbTZqTmZZMVBLcHlNaDFTWkhsam9HTGFOc0Vlb1VI?= =?utf-8?B?dU9RejFPcWhwUGVxWFNWM3ZKakZVUHl1Vkh4YnBSS2Z0WUxDMEk2VVV1SHJm?= =?utf-8?B?ZVJjWGsyMkpueWkyamRXK1F3M0U3UkJGNGpGRmVMODE0OTYra2kwSmMwZGRm?= =?utf-8?B?VGo0eXhXWmNKVGFYV0FyQ0FuOXdtVzdEQjBWY3FvRmswT01ZLzVEUEVsck5q?= =?utf-8?B?eUxSMHdqYzlLdW8xNHE3RXhncjFObDVya0h6STJ6bjVIbHNEOEhmYVJhRERQ?= =?utf-8?B?aEpiQXdVSHEyZS9qNFM5QjA1Yi91S2JEcHREeDFqQ3RxZDY0a1R5cjl3aitl?= =?utf-8?B?bENtaE9mOFVHL2c2QUtzNnovaXhwSUlkWTRoZWcwcUJDSW50ZXhDRGtBQmtM?= =?utf-8?B?L1ZGZHhKUWxQVERGbmM3UUFWTXZyT1RJMFIwa0xYUHQ5SjNmMDFQMk9NZENa?= =?utf-8?B?Wm1jTzhvWFR0SGF6ZkcwOVFPQVZ6SGVOdmRGcHRHTlpST2FNSnNHUWU2ZmhZ?= =?utf-8?B?eXE2RUNzOXNOWU1veWdOOG5TYmtaWG82OFhGMXV6L094TnFUc1dvWTlOZ0ZN?= =?utf-8?B?a1V5WDJmUmlHQ1NBdEFNK2dCdFFnRTdHWE5oZWVFQlZ3b0R1SUFKdW15QjV0?= =?utf-8?B?ZWhNSEJyZFNmTnRuV2FPcml4R295M0ZZZ0JrZ1FVc0Vtd1oyZWtwdU5Nb0xs?= =?utf-8?B?Q1paZStwYVpRL2VPMlluOGFIMnBOamp5bk00d2FkQkVQdmRURDlqeElRdmJS?= =?utf-8?B?a0VVc2xOSnZrV3IycXduOS94WTV1ZVd2MHV4a2FqTFl4cW9QVjkwUT09?= Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: bf14f6ed-e372-4f2b-a806-08de534a1973 X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Jan 2026 08:51:25.2142 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: 4p9UlzGAZDUPpRlHmqw0rfCEWfX5yuuFZA8SLSOCbxv6O7ZMG+HqnrKRu1Fa5Ac8GcobBUiltTDPeMgcSiH0+r2JklCeYSDDE52mk3kAVBs= X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1PR10MB7636 X-Original-Sender: zdenek.bouska@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=rTN2nBtd; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c20f::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "Bouska, Zdenek" Reply-To: "Bouska, Zdenek" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL, RCVD_IN_RP_CERTIFIED,RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: l2kPSm3dti+j On Wed, 2026-01-12 at 11:09 , 'MOESSBAUER, Felix' via isar-users wrote: > On Wed, 2026-01-07 at 15:06 +0000, 'MOESSBAUER, Felix' via isar-users > wrote: > > On Fri, 2025-12-05 at 15:08 +0000, Bou=C5=A1ka, Zden=C4=9Bk (FT D EU CZ= PDS1 ICC > > 1) wrote: > > > > This patchset adds proper SBOM generation in the two standard forma= ts > > > > SPDX and CycloneDX during the rootfs generation process. > > > > > > libre2-11 (provider of virtual package libre2-11-absl20240722) is > > > missing as dependency of libgrpc29t64 in > > > build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie- > qemuamd64.wic.cdx.json > > > See dependencies on Debian Trixie [1]. > > > > Thanks for the reproducer. This is indeed a debsbom bug, but only > > affects the mapping of dependencies. The provider package is still > > added to the flat list of packages in the SBOM (under the actual name, > > not the virtual one). > > > > I created and upstream issue for tracking: > > https://github.com/siemens/debsbom/issues/164 >=20 > Hi Zdenek, >=20 > Christoph just proposed a debsbom PR to fix this issue. It would be > great if you could give it a try (either via ISAR by changing the > upstream reference in the debsbom recipe) or just locally in a venv. >=20 > https://github.com/siemens/debsbom/pull/165 Hi Felix, I have ModuleNotFoundError: No module named 'license_expression' error when= I upgrade debsbom in isar next branch: ~/debsbom/isar$ git log | head commit 16b7b7e37b54be969453466e01ce4aa66e8ccb8e Author: Srinuvasan A Date: Fri Jan 9 18:06:26 2026 +0530 kas/kas-container: restore executable file permissions The file permissions were accidentally changed from 755 to 644. Restore them back to 755. Signed-off-by: Srinuvasan A ~/debsbom/isar$ git diff diff --git a/meta/recipes-support/python3-debsbom/python3-debsbom_0.4.0.bb = b/meta/recipes-support/python3-debsbom/python3-debsbom_0.4.0.bb index 410f358a..09746f8c 100644 --- a/meta/recipes-support/python3-debsbom/python3-debsbom_0.4.0.bb +++ b/meta/recipes-support/python3-debsbom/python3-debsbom_0.4.0.bb @@ -37,7 +37,7 @@ SRC_URI =3D "git://github.com/siemens/debsbom.git;protoco= l=3Dhttps;branch=3Dmain; \ file://rules \ file://0001-Use-old-license-description-in-pyproject.toml.patch= \ " -SRCREV =3D "a600f60966d08803eb17bfb81eb8828921497453" +SRCREV =3D "6e197577fb1444bed5608e12517807c23ccf77de" do_prepare_build[cleandirs] +=3D "${S}/debian" do_prepare_build() { z0042b9j@EVC00327NB:~/debsbom/isar$ cd .. z0042b9j@EVC00327NB:~/debsbom$ cat trixie.yml header: version: 14 build_system: isar machine: qemuamd64 distro: debian-trixie target: mc:qemuamd64-trixie:isar-image-base repos: isar: path: isar layers: meta: meta-isar: local_conf_header: meta-custom: | IMAGE_PREINSTALL:append =3D " libgrpc29t64" ~/debsbom$ isar/kas/kas-container build trixie.yml 2026-01-14 09:33:47 - INFO - kas 5.1 started on Debian GNU/Linux 12 2026-01-14 09:33:47 - INFO - /work/build$ /work/isar/bitbake/bin/bitbak= e -c build mc:qemuamd64-trixie:isar-image-base Loading cache: 100% | = = | ETA: --:--:-- Loaded 0 entries from dependency cache. Parsing recipes: 100% |####################################################= ###########################################################################= #############################################| Time: 0:00:01 Parsing of 162 .bb files complete (0 cached, 162 parsed). 168 targets, 36 s= kipped, 0 masked, 0 errors. NOTE: Resolving any missing task queue dependencies NOTE: Resolving any missing task queue dependencies NOTE: Resolving any missing task queue dependencies NOTE: Resolving any missing task queue dependencies Sstate summary: Wanted 9 Local 0 Mirrors 0 Missed 9 Current 0 (0% match, 0%= complete)#################################################################= ########################### | ETA: 0:00:00 Initialising tasks: 100% |#################################################= ###########################################################################= #############################################| Time: 0:00:00 NOTE: Executing Tasks WARNING: mc:qemuamd64-trixie:isar-image-base-1.0-r0 do_rootfs_postprocess: = Your image is not configured completely according to systemd-firstboot. WARNING: mc:qemuamd64-trixie:isar-image-base-1.0-r0 do_rootfs_postprocess: = It prompted: "=E2=80=A3 Please enter the new hostname (empty to skip): " ERROR: mc:qemuamd64-trixie:isar-image-base-1.0-r0 do_rootfs_postprocess: Ex= ecutionError('/work/build/tmp/work/debian-trixie-amd64/isar-image-base-qemu= amd64/1.0-r0/temp/run.generate_sbom.19099', 1, None, None) ERROR: Logfile of failure stored in: /work/build/tmp/work/debian-trixie-amd= 64/isar-image-base-qemuamd64/1.0-r0/temp/log.do_rootfs_postprocess.19099 Log data follows: | DEBUG: Executing python function do_rootfs_postprocess | DEBUG: Executing shell function rootfs_do_mounts | DEBUG: Shell function rootfs_do_mounts finished | DEBUG: Executing shell function rootfs_do_qemu | DEBUG: Shell function rootfs_do_qemu finished | DEBUG: Executing shell function image_postprocess_disable_systemd_firstbo= ot | Created symlink '/etc/systemd/system/systemd-firstboot.service' =E2=86=92= '/dev/null'. | WARNING: Your image is not configured completely according to systemd-fir= stboot. | WARNING: It prompted: "=E2=80=A3 Please enter the new hostname (empty to = skip): " | DEBUG: Shell function image_postprocess_disable_systemd_firstboot finishe= d | DEBUG: Executing shell function image_postprocess_sshd_key_regen | DEBUG: Shell function image_postprocess_sshd_key_regen finished | DEBUG: Executing shell function image_postprocess_machine_id | uninitialized | DEBUG: Shell function image_postprocess_machine_id finished | DEBUG: Executing shell function image_postprocess_mark | BUILD_ID=3D"v0.11-265-g16b7b7e3-dirty" | VARIANT=3D"Isar target filesystem" | VARIANT_VERSION=3D"1.0" | DEBUG: Shell function image_postprocess_mark finished | DEBUG: Executing shell function image_postprocess_configure | DEBUG: Shell function image_postprocess_configure finished | DEBUG: Executing python function do_generate_sbom | DEBUG: Executing shell function generate_sbom | Traceback (most recent call last): | File "/usr/bin/debsbom", line 5, in | from debsbom.cli import main | File "/usr/lib/python3/dist-packages/debsbom/cli.py", line 13, in | from .generate.generate import DistroArchUnknownError | File "/usr/lib/python3/dist-packages/debsbom/generate/__init__.py", lin= e 5, in | from .generate import Debsbom, SBOMType | File "/usr/lib/python3/dist-packages/debsbom/generate/generate.py", lin= e 16, in | from ..apt.cache import Repository, ExtendedStates | File "/usr/lib/python3/dist-packages/debsbom/apt/cache.py", line 18, in= | from ..dpkg.package import BinaryPackage, SourcePackage | File "/usr/lib/python3/dist-packages/debsbom/dpkg/package.py", line 18,= in | from ..apt.copyright import Copyright | File "/usr/lib/python3/dist-packages/debsbom/apt/copyright.py", line 7,= in | from license_expression import LicenseExpression, get_spdx_licensing | ModuleNotFoundError: No module named 'license_expression' | WARNING: exit code 1 from a shell command. | DEBUG: Python function do_generate_sbom finished | DEBUG: Executing shell function rootfs_do_umounts | DEBUG: Shell function rootfs_do_umounts finished | DEBUG: Python function do_rootfs_postprocess finished ERROR: Task (mc:qemuamd64-trixie:/work/build/../isar/meta-isar/recipes-core= /images/isar-image-base.bb:do_rootfs_postprocess) failed with exit code '1' NOTE: Tasks Summary: Attempted 68 tasks of which 0 didn't need to be rerun = and 1 failed. Summary: 1 task failed: mc:qemuamd64-trixie:/work/build/../isar/meta-isar/recipes-core/images/isa= r-image-base.bb:do_rootfs_postprocess Summary: There were 2 WARNING messages. Summary: There was 1 ERROR message, returning a non-zero exit code. 2026-01-14 09:39:36 - ERROR - Command "/work/isar/bitbake/bin/bitbake -c= build mc:qemuamd64-trixie:isar-image-base" failed with error 1 ~/debsbom$ Zdenek Bouska --=20 Siemens, s.r.o Foundational Technologies --=20 You received this message because you are subscribed to the Google Groups "= isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/= AS1PR10MB567546620BE477D84A63DE63EB8FA%40AS1PR10MB5675.EURPRD10.PROD.OUTLOO= K.COM.