diff mbox series

[RFC,03/30] classes: create-spdx-2.2: use name and version for download dependencies

Message ID 20250211150034.18696-4-stefan.herbrechtsmeier-oss@weidmueller.com
State New
Headers show
Series Add vendor support for go, npm and rust | expand

Commit Message

Stefan Herbrechtsmeier Feb. 11, 2025, 3 p.m. UTC 
From: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>

Use the name and version parameter from the SRC_URI to determine the
name and version of the download dependency.

Signed-off-by: Stefan Herbrechtsmeier <stefan.herbrechtsmeier@weidmueller.com>
---

 meta/classes/create-spdx-2.2.bbclass | 9 +++++++++
 1 file changed, 9 insertions(+)
diff mbox series

Patch

diff --git a/meta/classes/create-spdx-2.2.bbclass b/meta/classes/create-spdx-2.2.bbclass
index de993ff5bf..aa195f5aa7 100644
--- a/meta/classes/create-spdx-2.2.bbclass
+++ b/meta/classes/create-spdx-2.2.bbclass
@@ -358,6 +358,15 @@  def add_download_packages(d, doc, recipe):
             package.name = "%s-source-%d" % (d.getVar("PN"), download_idx + 1)
             package.SPDXID = oe.sbom.get_download_spdxid(d, download_idx + 1)
 
+            vendor = f.parm.get("vendor")
+            if vendor:
+                package_name = f.parm.get("name")
+                if package_name:
+                    package.name = package_name
+                version = f.parm.get("version")
+                if version:
+                    package.versionInfo = version
+
             if f.type == "file":
                 continue