From 340e3dc4537522f44f3b8247d90b132e8e293948 Mon Sep 17 00:00:00 2001 From: Cedric DOURLENT Date: Fri, 1 Mar 2024 16:42:34 +0100 Subject: [PATCH] build: fix kernel component in CycloneDX SBOM As stated in the cycloneDX documentation, the field "type" is mandatory for all components. More details here (https://cyclonedx.org/docs/1.5/json/#components_items_type) Signed-off-by: Cedric DOURLENT (cherry picked from commit 84331215e57090a9cdae4af75af2539c39cd7de7) --- scripts/package-metadata.pl | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/package-metadata.pl b/scripts/package-metadata.pl index bc61577d22..b4855ce67a 100755 --- a/scripts/package-metadata.pl +++ b/scripts/package-metadata.pl @@ -675,6 +675,7 @@ sub gen_image_cyclonedxsbom() { license => "GPL-2.0", cpe_id => "cpe:/o:linux:linux_kernel", name => "kernel", + category => "operating-system", }; my %abimap; @@ -703,6 +704,7 @@ sub gen_image_cyclonedxsbom() { if ($pkg->{category}) { my $category = $pkg->{category}; my %cat_type = ( + "operating-system" => "operating-system", "Firmware" => "firmware", "Libraries" => "library" ); -- 2.30.2