From: Joshua Watt <JPEWhacker@gmail.com>
Date: Fri, 22 Nov 2024 20:15:57 +0000 (-0700)
Subject: lib/oe/sbom30: Prefix aliases with "http://spdx.org/spdxdocs/"
X-Git-Tag: yocto-5.2~1218
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=5e0ff36e025f5e842fa90b8219b53257d65ea66a;p=thirdparty%2Fopenembedded%2Fopenembedded-core-contrib.git

lib/oe/sbom30: Prefix aliases with "http://spdx.org/spdxdocs/"

While the SPDX ID aliases are primarily intended for internal use by the
SPDX code, they are used in places where a valid SPDX ID is expected. In
order to make sure that they still conform to this, prefix them with
"http://spdx.org/spdxdocs/openembedded-alias"

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
---

diff --git a/meta/lib/oe/sbom30.py b/meta/lib/oe/sbom30.py
index 8433637de80..0a7b4c05fbe 100644
--- a/meta/lib/oe/sbom30.py
+++ b/meta/lib/oe/sbom30.py
@@ -344,7 +344,9 @@ class ObjectSet(oe.spdx30.SHACLObjectSet):
                 alias_ext = set_alias(
                     e,
                     e._id.replace(unihash, "UNIHASH").replace(
-                        namespace, self.d.getVar("PN")
+                        namespace,
+                        "http://spdx.org/spdxdocs/openembedded-alias/"
+                        + self.d.getVar("PN"),
                     ),
                 )