diff mbox series

classes/create-spdx-2.2: Fix CPE reference type

Message ID 20251203143540.2765856-1-JPEWhacker@gmail.com
State New
Headers show
Series classes/create-spdx-2.2: Fix CPE reference type | expand

Commit Message

Joshua Watt Dec. 3, 2025, 2:35 p.m. UTC 
The CPE reference type should be the short name ("cpe23Type") not the
full RDF IRI.

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
---
 meta/classes/create-spdx-2.2.bbclass | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
diff mbox series

Patch

diff --git a/meta/classes/create-spdx-2.2.bbclass b/meta/classes/create-spdx-2.2.bbclass
index 94e0108815..0ffaeba0e9 100644
--- a/meta/classes/create-spdx-2.2.bbclass
+++ b/meta/classes/create-spdx-2.2.bbclass
@@ -489,7 +489,7 @@  python do_create_spdx() {
         for cpe_id in cpe_ids:
             cpe = oe.spdx.SPDXExternalReference()
             cpe.referenceCategory = "SECURITY"
-            cpe.referenceType = "http://spdx.org/rdf/references/cpe23Type"
+            cpe.referenceType = "cpe23Type"
             cpe.referenceLocator = cpe_id
             recipe.externalRefs.append(cpe)