From: Cedric DOURLENT <cedric.dourlent@softathome.com>
Date: Fri, 1 Mar 2024 15:42:34 +0000 (+0100)
Subject: build: fix kernel component in CycloneDX SBOM
X-Git-Url: http://git.lede-project.org./?a=commitdiff_plain;h=84331215e57090a9cdae4af75af2539c39cd7de7;p=openwrt%2Fstaging%2Fthess.git

build: fix kernel component in CycloneDX SBOM

As stated in the cycloneDX documentation, the field "type" is mandatory for all components.

More details here (https://cyclonedx.org/docs/1.5/json/#components_items_type)

Signed-off-by: Cedric DOURLENT <cedric.dourlent@softathome.com>
---

diff --git a/scripts/package-metadata.pl b/scripts/package-metadata.pl
index 9e0e6dd9e5..a46f819ab5 100755
--- a/scripts/package-metadata.pl
+++ b/scripts/package-metadata.pl
@@ -677,6 +677,7 @@ sub gen_image_cyclonedxsbom() {
 		license => "GPL-2.0",
 		cpe_id  => "cpe:/o:linux:linux_kernel",
 		name    => "kernel",
+		category  => "operating-system",
 	};
 
 	my %abimap;
@@ -705,6 +706,7 @@ sub gen_image_cyclonedxsbom() {
 		if ($pkg->{category}) {
 			my $category = $pkg->{category};
 			my %cat_type = (
+				"operating-system"        => "operating-system",
 				"Firmware"        => "firmware",
 				"Libraries"       => "library"
 			);