tequilaOS/platform_build
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Add a package in the SBOM of framework_res.jar.

Browse source 
Bug: 303906275
Test: m layoutlib dist
Change-Id: Ie7a0b97173643fc2cafbd9c7e5c6618ad9c68aeb
This commit is contained in:
Wei Li 2024-01-05 23:51:01 -08:00
parent 415fdddd98
commit 0268764c0e
1 changed files with 15 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
tools/sbom/generate-sbom-framework_res.py
View file

@ -52,8 +52,19 @@ def main():
filename = 'data/framework_res.jar' filename = 'data/framework_res.jar'
file_id = f'SPDXRef-{sbom_data.encode_for_spdxid(filename)}' file_id = f'SPDXRef-{sbom_data.encode_for_spdxid(filename)}'
file = sbom_data.File(id=file_id, name=filename, checksum='SHA1: <checksum>') file = sbom_data.File(id=file_id, name=filename, checksum='SHA1: <checksum>')
package_name = 'framework_res'
package_id = f'SPDXRef-PREBUILT-{sbom_data.encode_for_spdxid(package_name)}'
package = sbom_data.Package(id=package_id, name=package_name, version='<package_version>',
download_location=sbom_data.VALUE_NONE,
supplier='Organization: <organization>',
files_analyzed=True,
verification_code='<package_verification_code>')
package.file_ids.append(file_id)
doc.packages.append(package)
doc.files.append(file) doc.files.append(file)
doc.describes = file_id doc.describes = package_id
with open(args.layoutlib_sbom, 'r', encoding='utf-8') as f: with open(args.layoutlib_sbom, 'r', encoding='utf-8') as f:
layoutlib_sbom = json.load(f) layoutlib_sbom = json.load(f)
@ -72,7 +83,9 @@ def main():
if file[sbom_writers.PropNames.FILE_NAME].startswith('data/res/'): if file[sbom_writers.PropNames.FILE_NAME].startswith('data/res/'):
resource_file_spdxids.append(file[sbom_writers.PropNames.SPDXID]) resource_file_spdxids.append(file[sbom_writers.PropNames.SPDXID])
doc.relationships = [] doc.relationships = [
sbom_data.Relationship(package_id, sbom_data.RelationshipType.CONTAINS, file_id)
]
for spdxid in resource_file_spdxids: for spdxid in resource_file_spdxids:
doc.relationships.append( doc.relationships.append(
sbom_data.Relationship(file_id, sbom_data.RelationshipType.GENERATED_FROM, sbom_data.Relationship(file_id, sbom_data.RelationshipType.GENERATED_FROM,