Per discussion with SPDX licensing group, the package license statements
classify as declared licenses, not concluded licenses.
Note that this is the same as a change made to the recipe licenses, just
for packages.
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
pkg_objset.new_relationship(
[spdx_package],
- oe.spdx30.RelationshipType.hasConcludedLicense,
+ oe.spdx30.RelationshipType.hasDeclaredLicense,
[oe.sbom30.get_element_link_id(package_spdx_license)],
)