When using the west spdx functionality to create an SPDX SBOM during a build, several SPDX Documents are created. In some instances, the SPDX metadata field PackageLicenseInfoFromFiles is required to be present according to the SPDX 2.2 spec, but is being omitted from the build.spdx Document if no licenses were detected. This commit fixes this bug so that a NOASSERTION value is written for this field for Packages that do not contain any detected licenses. Additionally, this ensures that Packages with a FilesAnalyzed value of false do not have this field written, also in accordance with the spec. Fixes #42070 Signed-off-by: Steve Winslow <steve@swinslow.net> |
||
|---|---|---|
| .. | ||
| __init__.py | ||
| cmakecache.py | ||
| cmakefileapi.py | ||
| cmakefileapijson.py | ||
| datatypes.py | ||
| getincludes.py | ||
| licenses.py | ||
| sbom.py | ||
| scanner.py | ||
| spdxids.py | ||
| util.py | ||
| walker.py | ||
| writer.py | ||