From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Fri, 24 Oct 2025 10:33:29 +0200 X-Sieve: CMU Sieve 2.4 Received: from mail-il1-f183.google.com (mail-il1-f183.google.com [209.85.166.183]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 59O8XROW032530 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Fri, 24 Oct 2025 10:33:28 +0200 Received: by mail-il1-f183.google.com with SMTP id e9e14a558f8ab-430d4ed5cfcsf69638495ab.0 for ; Fri, 24 Oct 2025 01:33:28 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1761294802; cv=pass; d=google.com; s=arc-20240605; b=Z3l+96WLlEPDSrUFesp2TtaXkYCh4bw1tu1RmXSH2PobM3rstWe03MGQUZgeJ1rbr4 doB4PBsJVvANrGkNOW5Bmf34wlw/4PBH64SULFHQbC+mS4QQhBC6MjVH3jz0Fg3Qzsbz dyb3yUQvd6RWMpHJNRYAlFr7G172lhbIoxjbNtprSJRtIsm6Q5Xu6CspXJGvq7jgQUbA Wxa0196OqN0cIrXWaTsQiANwzQtxrb1vFGm9B+3fdahdJF24z65eHf7LsscTtPO8i7cF ps0O7FBGODh4b4x3K3ErVy6x3T/rnwxOt/zWe2DICrQzja90hBZviDNtk7hw7GRdTm3w SfMQ== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:msip_labels :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=pns5W4HlB5OKRgkLxGuedhol/spMNIxB+xAlg14rLh4=; fh=I595NvBTWt4UrshATHbxPxRRgvDAgpQnUIa9S3okg8U=; b=NAm/dfHeYSPTXGNfLaas2FGaAN2j+voILWSrIQfzQplRcbd6xzqb+xQu4xD1ZtIcYS t0K5vwkK6zPqdB0sGZiRYva19xz68ALYUReOuJhDQzZrWN1pPyIp6Hcp7t5MGv6E+hqm KZVIjqQsYL/Y7l+qhpnHT91VFnkT2QTgGYEDrZuSabDH0w5Q6YbyQLVCOcRz3B94NioQ kj/Q56Czsoy9vw7eQ9lB0b6jfBCYmNmshR2hYfQIQKSGMHEVnibuEgswj+dE7kIKWOJf m8bWBfmOV6ZxecZLjmPLk4eBm6zlRocrUcuwF0GJMAFj2PgArCVVjUWVslC71+SOP8XE hfwA==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=NUxIYkMY; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1761294802; x=1761899602; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :msip_labels:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from:from :to:cc:subject:date:message-id:reply-to; bh=pns5W4HlB5OKRgkLxGuedhol/spMNIxB+xAlg14rLh4=; b=o3c0LOc5TEHMQyndGVVPne33rGOfFRGl5M6wzrVaTzXbhu0o+ewcWh9pzab/HBfUMV PuXpGgPFtYfyPCeSIr7fy9xa2aASPKTUslKI2DoPMYa4MUwWyNjzyLK2HbEuAu1k03sE VEtkrVRTmnsnM0ER8TEyDz5OG9WaEkRLrpgKO2kA50HjJPES5Ng2LoLFV9izd1YAWnIi LKLDFBOgL7LQvT2yzqAbZDTlSHFo8JQYE5Fo0quOf1oGK7Jr+CBENy+ssFPerAyu41t8 Fn6MMdVy6TnSjNnuif+jQYXuZe+skO12CepC6FhAz40/TZgb3FVDW/z4jTZ0P5m0kQV9 zSMA== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761294802; x=1761899602; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :msip_labels:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=pns5W4HlB5OKRgkLxGuedhol/spMNIxB+xAlg14rLh4=; b=rqZpYre32qEji8QkyzQP2wHY31eJUiFTTFLD4p2t5ehskN4GWuz/2DhQHN9TBSHrTp kUYmXxxRlwmVfZg5m+gWA38Jtc6caUZL7AXO9nir7owWcYtexWDJ8mdunwkgts4Nef0/ 4Uu1xD68BX5XtAfeQzMZ1wz1PGh2c1NRubhzYlrtbqHFaH/KjCa1omIievC+8Jb62pvh b8WSo+dTjZtvtpPCzFdB0pE6n70VORz4Dk6bNUjXtTqXJw2UwWMbSbp0mgN1JMuej8j/ 30enxcd1KW1s5jy1MOclHM14b4SWF7qLXYOCHYnj38gyyuefsWqBXRtAzzgRemuz0KOH y8WQ== X-Forwarded-Encrypted: i=3; AJvYcCVZefNT9HU03VFqOZ8qE39eY+YubhwUDNMaJ2A+iEIh+roumVDUwB8YBNuDj5u/YP2NqQml@ilbers.de X-Gm-Message-State: AOJu0YxNT2ys+sjzonsg/aTzMcCWm2Z0nwU7JZ61y8OkDHpMucH24Q6f 5OjNOIKzJ58wUysqjBVOyR3g6QxpqTKdo43qe531wnQPrHUVoGfw9V5J X-Google-Smtp-Source: AGHT+IFAyovR7t755Bpi3Hcts2SKCpLaRnK2hMr/0sh6+Qp63EZwFTE8prYwog537j1WuuIKiNvGgQ== X-Received: by 2002:a05:6e02:318e:b0:42f:680c:9cc7 with SMTP id e9e14a558f8ab-431ebf58443mr18076255ab.16.1761294801957; Fri, 24 Oct 2025 01:33:21 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+aQncpoVUObGZn0yrj5bUxbykinq38T95nXLtYV/Zv1qg==" Received: by 2002:a05:6e02:4516:20b0:431:d7da:ee4d with SMTP id e9e14a558f8ab-431dc186c62ls18272755ab.1.-pod-prod-02-us; Fri, 24 Oct 2025 01:33:20 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCVTkFIgXIlExs3Oj4QsE9Li8MEIz4fBuNdYvMuhBnynOiEEnQIaFrcfbccB3OI8MXJsl3eSsX58q3pR@googlegroups.com X-Received: by 2002:a05:6e02:16cc:b0:431:d9d9:de1f with SMTP id e9e14a558f8ab-431ebeb4707mr21744555ab.2.1761294800487; Fri, 24 Oct 2025 01:33:20 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1761294800; cv=pass; d=google.com; s=arc-20240605; b=BRtTH1KbIePPiXjOCIbP4ImtTBp2mHpATBcx4wbeP8dK72Y1txAYiXj8sk5wFq+Xwa MGluPlSnPal9I/7GjKucRFfIh4tqf9lKRM3Vf4NMo7hCme6EldVqHDWMNuj0lTu6YMML ffV0ayyBqDxjC7RpiwiMcHALkCwByxBS9NKb6jTu+df72YfgY/+x805v70tFrq7A7FZp GSMzulhXstgsummeNzKzl5I5gZcSulkmMJPaTda5dYZzcWtFuCC8a2VairVwEJArdnNO f4zjMgdQ3BUfJIz0wE8t4SlXvcHYnTkCsNNiv3/33z2IBoyBBCSfTOGe9CmW+1YWY1xa pihA== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=r5Ky1YjgWEvRAK1Rtb/p3ZrgMaIUGGyznPB/MapUA4Y=; fh=7/JW5K1oYOVljNy3KdxM+Zjzty9gHiE0oUmDHdoeKcE=; b=ROxmJ8N9KQQVIIW4NVya+o/0MaZmyIArqgkbGPyb3B3vzjF9S39YICPCbAoY25rppT TtLWV+AHL9lFoeA4PQGKj/RXrdej3oxNCxz5uFDnLfzy5qsRuk7wNNqo4kJZqnCIxWlC RYLCq3FBpaeW/i3JDVnP66mw48aBDh9Eouno43RDd7h/WTulAWP0xMUZJCi56mhJx/rl AUSvC0NEYsHJ6U4Ji83ceUXEnTKgiSbyfDJLlZCYxo1NIwMcp5GwXE00JvOCc35Jwitk zy36RWdkCZUiWPVNA2HHfaPJUcx7AskI5vet6u4K+pxKnYhRPyYYH5t0sMKHMuzG2b+Z inVg==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=NUxIYkMY; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from DB3PR0202CU003.outbound.protection.outlook.com (mail-northeuropeazlp170100001.outbound.protection.outlook.com. [2a01:111:f403:c200::1]) by gmr-mx.google.com with ESMTPS id e9e14a558f8ab-431dbc7e059si3745375ab.5.2025.10.24.01.33.20 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 24 Oct 2025 01:33:20 -0700 (PDT) Received-SPF: pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) client-ip=2a01:111:f403:c200::1; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=w92vX0UDGqezn789v89kPwQ+S57tNWjd0Tb6Yl7gjREpKAHGME12qkX2TR50001gJfllxlVdHFzQ2vETXk3BXRBMdfKdqztnKqDCO9h50q7NTe9naWvs1X61g2TpAkYbQqfpGD8J6n4hKZKGSalE0uAQtpUoXwvxxoDFupBMv8M/I9JZ6IvNJKx42PfdyzorN0DLBCHI9woWk0VpjlEzIdfkBck23mi2tgWGDyfHU2zydwlMdLBKEo6velxxbwvAPZhNJqYR9uby8yXqD3YfZlH84tQ4ugv4SF+vJzRsemJLJpCoyNJuEYZ0kehlYgJKy23uek55I3NsOJl3Z5MRRg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=r5Ky1YjgWEvRAK1Rtb/p3ZrgMaIUGGyznPB/MapUA4Y=; b=m0D+ZcSVtb14djxS8rZbIAsHlYznfvrUs0vqj/3DQB6Kt/CBDTN5s95+vWWlexrATgOkR/oDAOPbuZRq69Shhb+SsfKxXnJbTy+5309s3OIltQfXjOF3U+2AOf/RpK92Six1w0arhOPPKRpvprMZ0RJUfnV7XvdM3Pyh3qsleaa2vTD/R1DAKo9NyBt0seUN+1EAr/mioL36mKyYagh9c2LknLnn9M+zPBsXF8SPBFJdxH1RIi8dOwEjHTqdYV5may67V2UrylieXQf/NqH8BP7vm2JLd/FaKKMeSe8RX2LPAdDSDmX6vqWxXtm4nWVxEN3QS5RMrR4D8TrfOdfOVA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:47b::22) by DB8PR10MB3340.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:11f::18) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.13; Fri, 24 Oct 2025 08:33:17 +0000 Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::f25:24f8:9a0e:3430]) by AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::f25:24f8:9a0e:3430%3]) with mapi id 15.20.9253.011; Fri, 24 Oct 2025 08:33:17 +0000 From: "'Bouska, Zdenek' via isar-users" To: "MOESSBAUER, Felix" , "isar-users@googlegroups.com" CC: "Steiger, Christoph" , "cedric.hombourger@siemens.com" , "Kiszka, Jan" Subject: RE: [PATCH v3 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v3 00/10] Add SBOM generation with debsbom Thread-Index: AQHcQ2oW5m/Lad61CkWadsRwZHNEP7TQ7UcA Date: Fri, 24 Oct 2025 08:33:17 +0000 Message-ID: References: <20251022153921.2494749-1-felix.moessbauer@siemens.com> In-Reply-To: <20251022153921.2494749-1-felix.moessbauer@siemens.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=d835f001-14ae-44bc-810e-8c492e6160dc;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2025-10-24T07:44:40Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Tag=10, 3, 0, 1; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS1PR10MB5675:EE_|DB8PR10MB3340:EE_ x-ms-office365-filtering-correlation-id: 71668179-b21a-4dcc-68bd-08de12d7fb43 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|366016|376014|1800799024|38070700021; x-microsoft-antispam-message-info: =?iso-8859-2?Q?BiVkEtXU+mbxRyJmKWw5mqwhkbgxJvDrS6L0XJHxTnqbuBpsOnuyCGqxCl?= =?iso-8859-2?Q?wUjw/HQFQgJGdR+GQ7c5HD9fNjPzJ5gVCx+ITuO18E81mqwi4I/NtAQTcX?= =?iso-8859-2?Q?RVIMtGnKCaJds0rIEjUkT1tO1asUOVXi/DCgUaoz4p+nkymTP5smXMWqPW?= =?iso-8859-2?Q?Je8KC3jkoLxwHS2VjSFFfypchVCHn71vG2Y3QjBNF/X71wQFtMSNP+aHnu?= =?iso-8859-2?Q?XsqdEF1xldsKjvFvQSH2QG2tKDCwdP9Yfv7yxuxKdFAexFUbNx7BwnhWKn?= =?iso-8859-2?Q?g7c6Ews+TCJCNl32xhIL9NWTj7tAU/0cq/P3X5ShD2j9DWYlDNgVTzOAv2?= =?iso-8859-2?Q?D4u4XBfLRsadBxGOJJXzmoUs31fB/XNXUO3jAFuSCM0m8eu5mOf5SADPcK?= =?iso-8859-2?Q?Od28fF9D9kXAsMrafSmlX+i4V4oml2DdYpTuiPfeVSsR3b0AlgOAapjAHD?= =?iso-8859-2?Q?+ewT0wFenDooB/WUznRHiML24dru+Cp6GA0bLnfQ9VdLYad8sLqxhgw6Xy?= =?iso-8859-2?Q?vkSDdLoRNBD/zkedZ4WdclJf5lC17u1V4dqFA2M3iNevEj6yd0GYGLURae?= =?iso-8859-2?Q?O9Cyi1fTJxK2VhTBrbEcsrK7/5+SCCoHrfMsKBj2D8L214PECU3MaKfTRR?= =?iso-8859-2?Q?Ge5QTX2JQ5/Tj6udiH+o3+4526hSQNtXYzUs6H+NTX8zA8wqlVmUVVnT8N?= =?iso-8859-2?Q?lNwh/t4xwrxRdFmD3yHNU7nu0DvRxa6EUIcXQYgym3Qfe1U4Lqyuhyx8+B?= =?iso-8859-2?Q?c1vMbLPh+Q3PaK0I8UqaetycAeHlqJM+kqu0mEwadnrrP3ITcS7AEmt3D/?= =?iso-8859-2?Q?N1I2diHiYRqWjJR2nnMby6JgkjtcUU5bQ2T9P9m83R8EVvFoOueTbainM6?= =?iso-8859-2?Q?5tGJBJBrjduBPzaobDKUuzX6zzRAuUv0nU2DWz6/futUg70hYzCs/ns681?= =?iso-8859-2?Q?/EndySNpMGYuzwq8ysY9e/T3yva1o0iihliK7VQ3uSMuNFjE+Xk9P4uQsD?= =?iso-8859-2?Q?fa4q5ci0WXCZeuc4rMylwdXCJ05lHCBDO7nM1Yqy8VkpW9sWHH7c8QF2xm?= =?iso-8859-2?Q?iM2tc4PsLDtCQ8w7n3eQzBsVNxa1srAzQiIdVDCMLjTYSrs3momatZnBv6?= =?iso-8859-2?Q?XpyHtxscrl/fP0g2zyB36IJ2+cqZlJwivkXHcSO2I+rkN995H5+I+XziDE?= =?iso-8859-2?Q?QMADleFBsedr5uaVPS4snNxvB2bF7YV/6cg6U/5lZswO292xlT6fdwb0jG?= =?iso-8859-2?Q?atnEliIoqBjQdeDNYjH6oM3NBoKn46oFpmkM+a6GFS2dDFYykM9cAqHyiE?= =?iso-8859-2?Q?vqPkXaTZvuDOb36bw8uA+D9WzM+DRezA2wA9m6Wcw8g7l2SMdaFAhStLVS?= =?iso-8859-2?Q?mRh3WZqj6zso0B3q4Y07KYyUSfVlPjb2DagFUO/xfhtWGcDi8ApgO4xDs2?= =?iso-8859-2?Q?6XUu7dioLiHNPpXFtH7q9G71D5JQfA/zdzJJIakFucp7XnB/oU7j9x1uNo?= =?iso-8859-2?Q?crXlRQJhPAAJYM/yb9WKAnoPFrNZKTYkY4ch+OjTxDu1g+E7M2Rev3gSTA?= =?iso-8859-2?Q?pZxoptlyN18rE5G0cpPRxBnbNgFU?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(376014)(1800799024)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-2?Q?wotwV0dXgHV2OXL+OEZqeXQ7SEDHNU7+mgyEIX9B7OkN1FUmpnW2t53I6s?= =?iso-8859-2?Q?EXw45qYA8wLVuy0XCBO6nipqiPcFR4p45p2JKzk1oAVc/gKK2CpuMOZiKD?= =?iso-8859-2?Q?VcnVt7gyVDO1mS2oQwowFNSc9a6l3xngZcanqx/C9dL1EyE2Jvm0rcVWYv?= =?iso-8859-2?Q?saNCd8W8t7pKFxIX50EPbQsXBji6SFG4P5cHmbBQxzJhjScyUQGQfTWIPs?= =?iso-8859-2?Q?GtnfUSzrgS90F/cWSEuwoHTOMmsZ7HVQIffZRkHfBVxl3pcAugcLUa285S?= =?iso-8859-2?Q?jB8G9Xm17L7y0qvoZsiUQatDj2m7OmwbbkmUBjESnDoT00p0uUY06cXNvV?= =?iso-8859-2?Q?Eb18uQLWdy51s3Vq/79ltLxP5s6ctLwqaevSSptj1aRXwQdx45QvPXJ9+Q?= =?iso-8859-2?Q?bQYP4fot7LgqPIptEXEC6npq6Tr2+aOxVocomCYtJzPrOFTuQDhrbuTDxX?= =?iso-8859-2?Q?6RKAEMsQH9bDAGrhV4O7XyEsKz7ILLJr5g3q8526heEWys4EUY6iylsS7q?= =?iso-8859-2?Q?fEUhRfQdisIIkm0reuSxsc5RCt69YEcuwnJAfegLemnr3NicBKiOWcFTjU?= =?iso-8859-2?Q?6DvuTRf8TT9wtbUAa7mXtTcy3tRoodA0yUntcXQ/NAe3U8esK8PZ1lbSP4?= =?iso-8859-2?Q?gGAf7DDqVfQrZl/ePh0cntN/den9sObNl19xh+wO1FhyTrsmPrcuqYkieo?= =?iso-8859-2?Q?2WhN5lzCSRaTYbx+czw+3KXzo7bUZnBRj1YYXRlm900k8P3E3DX9erTYGu?= =?iso-8859-2?Q?puFg4A395g39QtR3/AhYBxAmd+FthQxzwxSmwiKqsjIYRtxreDNYC+nPqW?= =?iso-8859-2?Q?oT7XYJwcVcik71o5U3nznTBOWFR2kYvenPThj/zei+dl/S1FOEG3HQ83mg?= =?iso-8859-2?Q?CAwTTTlefzR8hMhmOFVZqoeyGJQnLT0V3zIhm04bpBfpmznBv65lZ18NVv?= =?iso-8859-2?Q?i2n/lHdGRSU9bNTEAoRHDT+9lh/1wRXDFdxxPxMme17QL7QoQfeXwaOKM8?= =?iso-8859-2?Q?QyCuQLsuoABx6VHRFVwaaLKaCsGaJJsqLF7nTRHK7yKqsp/wAK3VvzpjAU?= =?iso-8859-2?Q?6j0zET90hwOlHDOYtJ92TaqpzouwVNtzMs7Px8YdDARISwQqe2WXVtB7/X?= =?iso-8859-2?Q?ixnBg3QbEHjWYevsd9FIkofxurF6KZcTEWM8mQCtOE5vslsxQ6E+bUauII?= =?iso-8859-2?Q?SbNLziQDamCYgVlk02W21SN8mQjkumS57Kv4a7bDoSBqfb/3OKK2BUviQd?= =?iso-8859-2?Q?1GGtkyXVxNDct4lPxudFji4C2m6duPFbFcknhFRAh5MBBY2uVBwUvErOwD?= =?iso-8859-2?Q?l4qMwhQsHTGasq8Be4qqIuoDcXUUKUb2UGNo2rmcyRPVbvB9Qoqp6+unCM?= =?iso-8859-2?Q?pyxlYIWKLJ9CKgFS05U8FhNE6MGtfass6PUhFV3osGLFFHFILAVIcWtL1F?= =?iso-8859-2?Q?ndvJ03iRhOEdCNhW6TgOxUXTGZamMmzjd084e+r/D6VuxJJP/TMPoTzJhh?= =?iso-8859-2?Q?bau2ehmjaDZMM+SiDe7iYXVJ2hiyI/1XUgwcxXtwBIOxPvBElcOXHZ0rtF?= =?iso-8859-2?Q?RTXzfs/XyxGohAAJuOosJkspo5DYOY5YuCi8m61MeXUQB1q/AzfC16ddtw?= =?iso-8859-2?Q?PeWq2jRN4BYgaFClBIT0vW8rxQcph4jiXQ?= Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: 71668179-b21a-4dcc-68bd-08de12d7fb43 X-MS-Exchange-CrossTenant-originalarrivaltime: 24 Oct 2025 08:33:17.5607 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: ylKhflsEaGCg7+QH/e7EIi1T/cvzGrhsakFLy4Y70vHE0kCiW/7JLHtBGh7NNx0wKkgejX2x8cAxYxCx/obRXZJETFXMsfgSdFz3SIQG95o= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB8PR10MB3340 X-Original-Sender: zdenek.bouska@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=NUxIYkMY; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c200::1 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "Bouska, Zdenek" Reply-To: "Bouska, Zdenek" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: P86uwSCQYDf0 Felix Moessbauer wrote on Sent: Wednesday, October 22, 2025 5:39 PM > This patchset adds proper SBOM generation in the two standard formats > SPDX and CycloneDX during the rootfs generation process. I have two warnings when downloading based on generated sbom by debsbom --progress download --outdir downloads --sources isar-image-base-debian-trixie-qemuamd64.wic.cdx.json "WARNING:debsbom.download.resolver:no sha256 digest for linux-mainline@6.17.2+r0. Lookup will be imprecise" I guess mainline kernel and other packages built from source are not yet fully supported. But SHA256 for sources with my patches could be computed in the future if I am not missing something. Right? I understand, that I can't then look them up in Debian, but at least the SBOM would represent the sources with the patches in the SHA256 and it would be possible to verify if I have correct sources. "WARNING:debsbom.download.resolver:no sha256 digest for openssl@3.5.1-1+deb13u1. Lookup will be imprecise" Not sure why SHA256 is missing in sbom for openssl. I use it without any change from trixie. Thank you, I like it! Zdenek Bouska -- Siemens, s.r.o Foundational Technologies -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/AS1PR10MB5675C516B1595B00485841F6EBF1A%40AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM.