classes/create-spdx-2.2: Fix CPE reference type

The CPE reference type should be the short name ("cpe23Type") not the
full RDF IRI.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

diff --git a/meta/classes/create-spdx-2.2.bbclass b/meta/classes/create-spdx-2.2.bbclass
index 94e010881503478df2edce6d633348e0054071ab..0ffaeba0e9b141ee364b5f9962cfe3a1a1d1e860 100644 (file)
--- a/meta/classes/create-spdx-2.2.bbclass
+++ b/meta/classes/create-spdx-2.2.bbclass
@@ -489,7 +489,7 @@ python do_create_spdx() {
         for cpe_id in cpe_ids:
             cpe = oe.spdx.SPDXExternalReference()
             cpe.referenceCategory = "SECURITY"
-            cpe.referenceType = "http://spdx.org/rdf/references/cpe23Type"
+            cpe.referenceType = "cpe23Type"
             cpe.referenceLocator = cpe_id
             recipe.externalRefs.append(cpe)