From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 27 Oct 2025 08:54:33 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-pf1-f191.google.com (mail-pf1-f191.google.com [209.85.210.191]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 59R7sVbZ017551 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 27 Oct 2025 08:54:32 +0100 Received: by mail-pf1-f191.google.com with SMTP id d2e1a72fcca58-78105c10afdsf3768221b3a.1 for ; Mon, 27 Oct 2025 00:54:32 -0700 (PDT) ARC-Seal: i=3; a=rsa-sha256; t=1761551665; cv=pass; d=google.com; s=arc-20240605; b=inOJu8DZJggb2BCpnlMQ8xHElPhzoKKFZS7hB7bSGSfURYCuKK0zRNNUybnI33pE+r FZY+kgXk1d2MjR47fcGl7IRBFBigXVGyJd6E2jN8gTBnfsOwGVcsGU1o3ocBfYjRGEaj IbEvSrw5MNA9EIGh6OoYIYkc1hs8Be4cEBbmCUHxEykJjvhzYc60WZUb8Qfvo+uIYugS QD2PX4Go4GKTLRmsSRJd71noddrLVyzxNdGmpv7yAWbZ6aOjf9SrsmoMPATmbUWNPOeO Bc4vGo4yjTBeHRhYcRMNtwnWz4vuYXoL7bvrH7QOYSHQUj/6ETFJiTibxXQvto5Fonqp 79cA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:msip_labels :content-language:accept-language:in-reply-to:references:message-id :date:thread-index:thread-topic:subject:cc:to:from:dkim-signature; bh=iAOQLGEh7hpjkOsUEyXWG0+H7OZVjWD0FzU9HaJlyE4=; fh=PGcx1VBzgDBvUOn3bENfG00G+7tLa+8d/h2v7HPHxdg=; b=QQONBPS1BNX132qyEyPwSdG2SbXYvH49ucgi2fT/7hucugnnWE4eoV53QvbNT7V4vp IbrDCY7Bw0Gkbl4ztI286SpSJqa+j28+eWDjWfr5GJwtYC8ylI2s39QUqeXasrohJBsF Y1ZpBpKrhK3cZXVvUO8VLeAdWQUp+G+1TmFGmEI6gXViO4IGbcmw4oIJnpTVjNkz6j2W rQvMqd2fpP1+i4yUTwd/pswsgu0N4z+JanYOwOlruyLZpjTjbed1d9W7K1iS1WcwjQ5z PoPQ0ECUxNJXc4dUQLAZ1jbwK9kbvta9FAsRKMdqXP++jVBhFPl9+TGAdiM4Lc9dX6Sh 6qcg==; darn=ilbers.de ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=KO3sYLYn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1761551665; x=1762156465; darn=ilbers.de; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :msip_labels:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from:from :to:cc:subject:date:message-id:reply-to; bh=iAOQLGEh7hpjkOsUEyXWG0+H7OZVjWD0FzU9HaJlyE4=; b=oOy373cOLkhzzIOtksHKCnmjo4csMzxnjJ4k/JfKecMb5/dK9x/fRwgiRgkSYwcolg z3L0QZWFgQsjvmE2ACirA1nhc0hDdFBiYJGS9ABCkT7wRLPpdFEdlh7wviyFg9kOo+US PmPy3EM2g3+QWzZsWWwQuAJIMBlinkKprcpZjSujPTwuy2psgE+Q6z2QN70RsNOKfabf tzEXNgbMeJiHR28CUdGFA5/m1NxzwpgUDG+7JeCfEAsreZ3i8DEgrpMsKICulweZg20G pwV95C5ToiLzsDnmfx5M6zGcxjUxJzqeE3L0V4g4857Xg8m5bEvEXprdcZDerAZfRCIt oE2Q== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1761551665; x=1762156465; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :msip_labels:content-language:accept-language:in-reply-to:references :message-id:date:thread-index:thread-topic:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=iAOQLGEh7hpjkOsUEyXWG0+H7OZVjWD0FzU9HaJlyE4=; b=AheI7D8BnvZPftJN0uJCoP2nohNKsjmdVYomLYB+fApXbY/3cYZGjwo3zHZ8AnTyjV C/UBA8nLxDinGyAmBktTdPBP0iho9dYF39PBonmHSkUGWRpYoLdejIkMOF5qHKLjZIUW jcKQdsOplZyI49Q8rIIyJXUjq9AloihGKGdftwtCJd3/OlKuB1075AD5HaAULZAJVcPv EboFvf3V9jPsSs0EJrU6LxPVYg4ADx1wR/U9FkewvSct85z6PJi/d+rtJh8AfXus9+SA SaURyMxmsykfVyLaVFHD8oCMn7B4NfJHyFRO7IrHUvisDKo/SKffiDUhJZRh5DeAZ5q/ Bh+A== X-Forwarded-Encrypted: i=3; AJvYcCUd/MgvXGin1Ist7s/Y3CvcRzd2tqbKrbx97FvdxtF7BRSkqmlVzMnKLw/xwgU5LUItyWW2@ilbers.de X-Gm-Message-State: AOJu0YzEA/zLU1+ISK92XNCJmjxxKh3cvOBEwRgleYANlmw5IGHvYlgu 4kKR4UnRwtM1oPvIb81IFm+dpiXyOgzl7FLg1w1h225MmTpuRb48kvfY X-Google-Smtp-Source: AGHT+IH3LimYRsFEdlTJM47I9wZ6ZZiueB+R64LUjHrKi6wkCl12U/5YO7YxNqntktiuJmuBJHJlNA== X-Received: by 2002:a05:6a00:88f:b0:77f:2978:30b0 with SMTP id d2e1a72fcca58-7a28678f6e3mr12010414b3a.11.1761551665414; Mon, 27 Oct 2025 00:54:25 -0700 (PDT) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+a6Gq2O4P6HjJq4qhI3yiGfqrsK9UgqwykVi5alDMTTDw==" Received: by 2002:a05:6a00:6902:b0:77e:17d1:1181 with SMTP id d2e1a72fcca58-7a275573b6els2945084b3a.2.-pod-prod-02-us; Mon, 27 Oct 2025 00:54:23 -0700 (PDT) X-Forwarded-Encrypted: i=3; AJvYcCUIs2Yp/hMSeJUsI5SlfQvEaUghZsF45DD/rPcmb13nBjasLJy97FY4bqI8cnlph4xq467F3SY/P5iL@googlegroups.com X-Received: by 2002:a05:6a20:94cb:b0:342:5901:fd94 with SMTP id adf61e73a8af0-342590200edmr5713950637.13.1761551663523; Mon, 27 Oct 2025 00:54:23 -0700 (PDT) ARC-Seal: i=2; a=rsa-sha256; t=1761551663; cv=pass; d=google.com; s=arc-20240605; b=V0MtvnySf34l2UoVoCy5nA8ms9Yi5kf16+dDXclQkD2R6b2quq2FD06nq8f7/Ds3pV wwlVRa/xajgPVRSG6Ek6fhF5dMA30F5SxOf3Zek25q6ueOOW7w1RwQnJyS4ki5o7hr2n VbWEQuZMcd+WZdJrjO6TlIVzz8FgffcdxamCFkJaq+6LlATMAUKkkR9f0GsQqfgqkC6q QTllfLoqzn2f6G1Sl9zDY7Ig8pejkoB8RLUEAbBx3w1gwkSdi3qcRZFbr05QPcLnLZaa ZKeMoXn1lkT0Y8r4JmRLtYhxVrNlQjDisWODBxDe7ezGidYyGQWiwEhZc+EWcr7AR3A4 b6vw== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:msip_labels:content-language :accept-language:in-reply-to:references:message-id:date:thread-index :thread-topic:subject:cc:to:from:dkim-signature; bh=VNEwQ33tk3bWyNc1MbvTunRL32XXX2tGY04iQWh46nw=; fh=7/JW5K1oYOVljNy3KdxM+Zjzty9gHiE0oUmDHdoeKcE=; b=KZmD1EnJJdekhuzJqHmttuVaI2+ESTtPNQvsQEqlEkzkcj0hOCXATNPhjDysTEWhRu tMrOv9w8AtYCO3zgAU03QNgIJUtGfJl9eiT7fHumKIa961+uJz/QDe4ZYj6zY3EnEFAC Q9ol2E7X2cBNQjS8mSImBogYohgCOa1SGHY07usWHBupSlesKJX7HvTUug5efbJJpLac AlhV2UaDNPb7JYHrm9d+6XJ3qvTT+T0oMp2TtrO7MScb3sutCSb8IUdJZef/kkeT5AM5 8i5lQVhpurBzaj55cNz/pOYWTYHBO6phJorCFwxYbEFcHlUeXeZtOrC4bxAPbr5pEZgQ Vr2w==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=KO3sYLYn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from GVXPR05CU001.outbound.protection.outlook.com (mail-swedencentralazlp170130007.outbound.protection.outlook.com. [2a01:111:f403:c202::7]) by gmr-mx.google.com with ESMTPS id 41be03b00d2f7-b71f1fa55dcsi236244a12.2.2025.10.27.00.54.23 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 27 Oct 2025 00:54:23 -0700 (PDT) Received-SPF: pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) client-ip=2a01:111:f403:c202::7; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=DtJNBxzeeBK/gVmG1aFWQOf7SBPper28KTUBmQA0bOZ5hxOq0Xw56GiEk9zat0VxBO6A5bvwX1DUYPb/WRurTj4migH800slG+Kc2FA4Z5pETct2jgoUKqNKJ3XPeM/mENYsE7aOBNDy9jfFh72yPKvmGWIAXyZh6dMx6WDYcwhI1p062LUa03lx6FvtD4cdmm3eI5sIHbXqltK72nrHZqItFQ5IQNiDs5TW39mM2u2+9+q1amESEKPpMt7H68zqlQIXTbvFqrxcAjUZm0AoH0MIyQZBffxkM6CMX5pg5eFeDixZdqFX3Xg3ZNQRq3ZJxCQTWQmUJyiuwdcRyw6jGQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=VNEwQ33tk3bWyNc1MbvTunRL32XXX2tGY04iQWh46nw=; b=Mfo2W38vXYU+ELU+Nm+jYeIQwvKM5T+MbSBHU3UPKiu6kbIc/ZTbj4CEk3W5SJZOBOH/EBzdTbgaXV2dI21FngHLQ/oYecHJw1q+jdyON/j0Q7n5sFXyH5/bUgi0TJQEvx6NwhyNjIX4Y2yW6AVmVL+bGbpT1GOL+uR1wU1YD9Gz61t2iUkpPM+Zhtvg4vewZNmWlH0Xr+FxsgdWrX/qOD2RIm6OTd/Hh+gwJE2HoLYGsj3gZb1jTwHI+1fq//mn2mF99ScqERGFhQ7DeKRSdA0abanCTTw9wL4shd3iIXCr8eAUBN40N9AAs2mXlF3UTtOIozV93oj3FeErmsBeqA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:20b:47b::22) by GVXPR10MB8583.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:150:1dc::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9253.18; Mon, 27 Oct 2025 07:54:20 +0000 Received: from AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::f25:24f8:9a0e:3430]) by AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM ([fe80::f25:24f8:9a0e:3430%3]) with mapi id 15.20.9253.017; Mon, 27 Oct 2025 07:54:20 +0000 From: "'Bouska, Zdenek' via isar-users" To: "MOESSBAUER, Felix" , "isar-users@googlegroups.com" CC: "Steiger, Christoph" , "cedric.hombourger@siemens.com" , "Kiszka, Jan" Subject: RE: [PATCH v3 00/10] Add SBOM generation with debsbom Thread-Topic: [PATCH v3 00/10] Add SBOM generation with debsbom Thread-Index: AQHcQ2oW5m/Lad61CkWadsRwZHNEP7TRB9XwgAAMFgCAAEHTgA== Date: Mon, 27 Oct 2025 07:54:20 +0000 Message-ID: References: <20251022153921.2494749-1-felix.moessbauer@siemens.com> <94f9f4ed78522343bcc4d999d84d3894f3086e31.camel@siemens.com> In-Reply-To: <94f9f4ed78522343bcc4d999d84d3894f3086e31.camel@siemens.com> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: msip_labels: MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ActionId=0bc88b93-3eb8-49f7-aced-08ebdfae035d;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_ContentBits=0;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Enabled=true;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Method=Standard;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Name=restricted;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SetDate=2025-10-24T13:58:33Z;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_SiteId=38ae3bcd-9579-4fd4-adda-b42e1495d55a;MSIP_Label_9d258917-277f-42cd-a3cd-14c4e9ee58bc_Tag=10, 3, 0, 1; x-ms-publictraffictype: Email x-ms-traffictypediagnostic: AS1PR10MB5675:EE_|GVXPR10MB8583:EE_ x-ms-office365-filtering-correlation-id: d8dac05a-9810-4e29-c0db-08de152e0963 x-ms-exchange-atpmessageproperties: SA x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|376014|1800799024|366016|38070700021; x-microsoft-antispam-message-info: =?iso-8859-2?Q?Sx4vpFZ2uaMPLKA2JGjbyRSlnZgbPAiK9Vh0Srfc68xt6PEVuyXTZB38Oz?= =?iso-8859-2?Q?r1+1gf/KADOITZtrZ97dzRol6SimYgzT3JVD3fzPjdSAYZaoKtgarGZxi/?= =?iso-8859-2?Q?+kCGRotn+Jr1gvWAJvqkX3UOxvv6RqUn5asNditdh8ta/9b+qp9Hh7N+5Y?= =?iso-8859-2?Q?kQ7MK1tR7oeimtmEOav2DSwtYxlDna9e/YeFl87CcQ8z8V2LoNrSN8p+/X?= =?iso-8859-2?Q?ulSMx96vreVk/javCcTkHAdQ3xann13XFndHseMPvvQ+GC6QuwXeLvrRg2?= =?iso-8859-2?Q?yt4ETKak8EZ/iKG26ZZ5QObMrIgqo6Z7+VTLP4RgF1PQla5syYaYa7BQ04?= =?iso-8859-2?Q?fHjOTVdPb854mafTfN+JfRCe+eEsQjhpmfArYi2kYK9rJHNgk1P5XnvyJw?= =?iso-8859-2?Q?AJFfU16qg4fjiw1O0DYIilLyRx/GZphqlcgsoxiwwiwHonA/8YaKhHtT2R?= =?iso-8859-2?Q?QVKQtuCuMvT9+nGIPtC01cuSrYX6UY0X3s0kyChTV2dUpqRYdj5ohRY9KI?= =?iso-8859-2?Q?usz+cjZeXOg+wmtReoFnn7fvvpLyFiUpf08pKAZE1u/1YhehKvZVqaeSfj?= =?iso-8859-2?Q?3otS04i0rSbV7RpRT+51BopsIWT7poUHrSULWv06JNAYX9mGmZiWJojGn4?= =?iso-8859-2?Q?RdfVK3K5QMhxnYBMj+JZf+5MYhUmm7YplnZCsV3b90VWzab2YpWaAmgGN+?= =?iso-8859-2?Q?7qXZhYhaoZl9UBvuAJRRFEtIpM9o7gfeEVHLEjiXAXHqcGSzOmcOcn6o9F?= =?iso-8859-2?Q?ifnk/C4pdix8K5G+puYVYur/R5DXkFLoBFE+mI/bWnx0r8NxYxf/TPHpmm?= =?iso-8859-2?Q?aDGhEWLVTnVLmjLpbShsvH4XQ6BeSUXZGNOrGdxlSVWjy3nyDk7/Nnfky2?= =?iso-8859-2?Q?joFDchSBLkxPdU2y5lL5Ag5G4jSJXM3O7aafZRsSz4sBSr05JS39KyeRoM?= =?iso-8859-2?Q?Qcp4+3DBa2VXi2pEAY4CN40aQKSWFHXSrb79WbnZB1DvYiTX05C4wM0c0W?= =?iso-8859-2?Q?sOlZlXGvULtwWKrEc1RMXctMeZDNjFIde628Vvqlc8bB38lu7GS1BH/Hn/?= =?iso-8859-2?Q?QaEdc4VY0Bv4cCDo0fwznedrMkq46gmpAnHnckNJz4W55zVTnG/2IZuPfd?= =?iso-8859-2?Q?Sipg5iodEvfjl3AqQbWcRvds9OlilKBWMZnWfw9oMVSCbhHWTLoKEaHuvn?= =?iso-8859-2?Q?ZSLU+dWP0wMQYRyrquNOzFNd/FL2dIPJlRDG1eVH1acWinRGP4ArPGWFq4?= =?iso-8859-2?Q?xKpizJ1TGUvn+G91ZmDha7F3i9UyX9MkqDDwLpgTw8zGbaBQoLb4LbOu27?= =?iso-8859-2?Q?VG0ywhtvGFfgD0aHkCBTuCyOSU+WVhTxxgKPeMdPnk2kVc/qDo7StnPxIR?= =?iso-8859-2?Q?4Tl5G636I7IdUEFQQbpSPpQf3zXfMXp921wtLghGGqA3q0xZlts54gSpOk?= =?iso-8859-2?Q?b+ZxKppLbj8qp/Y9lsir4v1j3G6bQsPRiYREdQ4xKYeLCMECa6Rt7Pip9v?= =?iso-8859-2?Q?mDMbpoj6jwlSeh7wPOLMhrxiDSpRDEr8ig6JtQQUhhZG+I49DuHQ+4EC96?= =?iso-8859-2?Q?5NHuGomvUYmQdNL+MG0Qazy45Etr?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(376014)(1800799024)(366016)(38070700021);DIR:OUT;SFP:1101; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?iso-8859-2?Q?lqnhZIQPIFzeg1a52VH8eoZPAEOvXa6ZJc84Nmt1HNtD/MMCJ9lXVrfI1M?= =?iso-8859-2?Q?yaG0boKuj0Vk+tGyO+hH0Ppy7ltgd+1R0mptLRXKcIwiEel2+cyK2nPv0s?= =?iso-8859-2?Q?cUEDK7cX/lhsAfOjsJ4CEn/P8UwcKUCHot9KT8ceKeyZ1hT9RNAXm6p6PF?= =?iso-8859-2?Q?Vz6TOlUi/z217h4Ba8+j59a1jar+Zba09RWoksJj/NQ6TyvGTrIz0GVxNR?= =?iso-8859-2?Q?4UajmLZ99Lw9bDs3hVd3lI6kOamGdsrqhnSSpB5fb+82ZE/Z0S6n3FR2yg?= =?iso-8859-2?Q?faroH7o0RCgZj//U5x7rDcDlsgZT3U7MSOa1mQa+wjdejdW4V4oAoFSH3V?= =?iso-8859-2?Q?GwPfICcKFqD2UllHsNVf9TYcXVa/xZ9yqrTwca+U1DAa4WBdxixxjifLEG?= =?iso-8859-2?Q?yV7kwrjxFXhJfOlEDpj68LPR/9u7XErfuXKN4txZuM102Ccw+3jMz90ggO?= =?iso-8859-2?Q?R6g1eLzeGTCSqYv+F0Q2ujkbNaQqXj90uXo+HRGUPle2otI35OCXWQfrUK?= =?iso-8859-2?Q?6lQsOxFBj5ykdMd6OVMUlQO4Qdh8bzC5Ig03KbAO2jeg+WqbbpOkL20NN0?= =?iso-8859-2?Q?AD2CQr3snCoNt4+riVo9VQYpjQxqUVSzkj1+hFusKFQsZiNlvPlCZgIEbU?= =?iso-8859-2?Q?0JGQr3OmNQxvkRNx01laY7FGi5nE6sGE2ZObGNAqQnQawRFOD8AsqrhRGh?= =?iso-8859-2?Q?hCKkObDLmQxgIFFkUhxUr4URqHXJQejvBQ4mPT1NCJDdMGeXVqEvU4zIUQ?= =?iso-8859-2?Q?GdYQFl7lYKKmuMPolxvr2WhwYrbttrba51eds9wG9whlkAUUPYdMj31E+q?= =?iso-8859-2?Q?CAMRsB95iTijU+FXo9YbEPgHDrXxDYf+ZTmqmoWChMCW6bfwoLfY9s3Iqf?= =?iso-8859-2?Q?6oWBAJAFmUEoLnPndnLxeTLW+Wy8FGr49s9rVpFZEgPcKIjmW5mpAEisaX?= =?iso-8859-2?Q?CJiTKYn/goIjvvHj68gm8CZ1OP/4dc6WREJ1svxSAEQAByMbjCkdu5jEi+?= =?iso-8859-2?Q?OSTJkDobh0YEAS0UY4Rc1m7K2E/rmWgfWKAobmCbB9X3aBM20NpQWspJjf?= =?iso-8859-2?Q?eVXZtXfUZmJujRA6ZO4w2WtePk8x19AjzrytFwmYOlyjIbj3GH2k63x0RM?= =?iso-8859-2?Q?uVV4qwL4At5lAOmi7vuaTxsZ1t5s4XuI+2fGNmJ9zCIOthgeVSoQcRsvzh?= =?iso-8859-2?Q?o3StQA73GJGTX5V/CPJrERxLlaXT3SPwZbRj3rStTPEbs3SnA/4GyuMQD4?= =?iso-8859-2?Q?O/VsDpJBo+CFcqdojaRFtHSci/PuqgNkOeXSUaBrBb0fGjT13b0gRf5XvS?= =?iso-8859-2?Q?6I/9/3DlELVpupO9mNYC4L4xJawj0Udjc6F8PhN1E4WJ07AEKyBMwtp09b?= =?iso-8859-2?Q?fDBRw548qysVD1uduMloNp9Ah5uBATc7HU+PblHG6jzR7vxFtY5AiNLegt?= =?iso-8859-2?Q?BayzzkIjSwl8ZJOOXdg0QRGZHxYy46hEVC+ATv2zJMIUOIuwknPVV3HlPe?= =?iso-8859-2?Q?u9pnD9h79IjJxs+JTH/tvtdeUIvbARgelp14KVw/sV+WyWIks4d2LYE1VQ?= =?iso-8859-2?Q?WGXxeNHUUY8grDKRzVWbK4Y1v9Qy7EKWS05DtKQl+2beL7nVk1g9/2o4Xv?= =?iso-8859-2?Q?UXtxpmzs9K5VijptzQalOtMb/v9GZwRsHbsNJOdD1+CepQoMY2fhLZwg?= =?iso-8859-2?Q?=3D=3D?= Content-Type: text/plain; charset="UTF-8" MIME-Version: 1.0 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-Network-Message-Id: d8dac05a-9810-4e29-c0db-08de152e0963 X-MS-Exchange-CrossTenant-originalarrivaltime: 27 Oct 2025 07:54:20.2808 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-mailboxtype: HOSTED X-MS-Exchange-CrossTenant-userprincipalname: gADp6FrNPHhc+V81hXEZzLtoBHNVKkmlufde7SKrjvPXGjo7ryJ6Azyi5Vsov0nqwB8VV7y/I99fMMZLAh0Tz9OJ7ZEXpBee/jRgvM5fYXc= X-MS-Exchange-Transport-CrossTenantHeadersStamped: GVXPR10MB8583 X-Original-Sender: zdenek.bouska@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=KO3sYLYn; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of zdenek.bouska@siemens.com designates 2a01:111:f403:c202::7 as permitted sender) smtp.mailfrom=zdenek.bouska@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: "Bouska, Zdenek" Reply-To: "Bouska, Zdenek" Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-TUID: znCPwyLgPSQo > Yes, definitely. At least in my SPDX SBOM this is listed (need to > create a CDX one). Are you sure your bash magic is right? Grub is not in SBOMs even if I look for it by text search. Reproduce: $ cat trixie_amd64.yml header: version: 14 build_system: isar machine: qemuamd64 distro: debian-trixie target: mc:qemuamd64-trixie:isar-image-base repos: isar: path: isar layers: meta: meta-isar: sudo rm -rf tmp/trixie_amd64_wic mkdir -p tmp/trixie_amd64_wic cd tmp/trixie_amd64_wic git clone https://github.com/ilbers/isar.git cd isar git checkout next git am ../../../isar-v3-Add-SBOM-generation-with-debsbom.patch cd .. isar/kas/kas-container --runtime-args --net=host build ../../trixie_amd64.yml grep grub build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie-qemuamd64.wic.cdx.json grep grub build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie-qemuamd64.wic.spdx.json grep grub build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie-qemuamd64.wic.manifest I still got these SHA256 warnings, same as with custom kernel: $ debsbom download --outdir downloads --sources tmp/trixie_amd64_wic/build/tmp/deploy/images/qemuamd64/isar-image-base-debian-trixie-qemuamd64.wic.cdx.json WARNING:debsbom.download.resolver:no sha256 digest for linux@6.12.48-1. Lookup will be imprecise WARNING:debsbom.download.resolver:no sha256 digest for linux-signed-amd64@6.12.48+1. Lookup will be imprecise WARNING:debsbom.download.resolver:no sha256 digest for openssl@3.5.1-1+deb13u1. Lookup will be imprecise downloading 232 files, 545 MiB (cached: 0, 0 KiB) > Hi, this means that the package was not found in the apt-cache. Did you > try this series with a fresh build-dir (sstate cache is ok)? > Warnings with custom patched kernel are these. Now I made sure, that I deleted build dir: WARNING:debsbom.download.resolver:no sha256 digest for linux-mainline@6.17.2+r0. Lookup will be imprecise WARNING:debsbom.commands.download:not found upstream: linux-mainline@6.17.2+r0 <- this is expected WARNING:debsbom.download.resolver:no sha256 digest for openssl@3.5.1-1+deb13u1. Lookup will be imprecise Zdenek Bouska -- Siemens, s.r.o Foundational Technologies -- You received this message because you are subscribed to the Google Groups "isar-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to isar-users+unsubscribe@googlegroups.com. To view this discussion visit https://groups.google.com/d/msgid/isar-users/AS1PR10MB5675F15271BD5D53AF21125FEBFCA%40AS1PR10MB5675.EURPRD10.PROD.OUTLOOK.COM.