Skip to content

dl9pf/meta-spdxscanner

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

85 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

meta-spdxscanner

meta-spdxscanner supports the following SPDX create tools.

  1. fossology REST API (Can work with fossology after 3.5.0)
  2. fossdriver (Can work with fossology)
  3. scancode-toolkit
  4. DoSOCSv2 (Scanner comes from fossology 3.4.0)

This layer supplys invoking scanners as following:

  1. fossology REST API
  • openembedded-core
  1. fossdriver
  • openembedded-core
  1. scancode-toolkit
  • openembedded-core
  1. DoSOCSv2
  • openembedded-core
  • meta-openembedded/meta-oe
  • meta-openembedded/meta-python

How to use

  1. fossology-rest.bbclass
  • inherit the folowing class in your conf/local.conf for all of recipes or in some recipes which you want.
  INHERIT += "fossology-rest"
  TOKEN = "eyJ0eXAiO..."
  FOSSOLOGY_SERVER = "http://xx.xx.xx.xx:8081/repo" //Optional,by default, it is http://127.0.0.1:8081/repo
  FOLDER_NAME = "xxxx" //Optional,by default, it is the top folder "Software Repository"(folderId=1).

Note

  • If you want to use fossology-rest.bbclass, you have to make sure that fossology server on your host and make sure it works well. Please reference to https://hub.docker.com/r/fossology/fossology/.
  • TOKEN can be created on fossology server after login by "Admin"->"Users"->"Edit user account"->"Create a new token".
  • If you don't want to create spdx files for *-native, please use meta-spdxscanner/classes/nopackages.bbclass instead of oe-core.
  1. fossdriver-host.bbclass
  • inherit the folowing class in your conf/local.conf for all of recipes or in some recipes which you want.
  INHERIT += "fossdriver-host"

Note

  1. scancode.bbclass
  • inherit the folowing class in your conf/local.conf for all of recipes or in some recipes which you want.
  INHERIT += "scancode-tk"

Note

  • If you want to use scancode.bbclass, There is no need to install anything on your host.
  • To aviod loop dependence,please use meta-spdxscanner/classes/nopackages.bbclass instead the file comes from oe-core.
  1. dosocs.bbclass
  • inherit the folowing class in your conf/local.conf for all of recipes or in some recipes which you want.
  INHERIT += "dosocs"

Note

  • There is no necessary to install any OSS on host.
  • Please use meta-spdxscanner/classes/nopackages.bbclass instead of oe-core. Because there is no necessary to create spdx files for *-native.
  • Default, DoSOCSv2 uses SQLite for database, so dosocs.bbclass doesn't support multi tasks of do_spdx.

About

SPDX scanner support

Resources

License

Stars

Watchers

Forks

Packages

No packages published