From 84331215e57090a9cdae4af75af2539c39cd7de7 Mon Sep 17 00:00:00 2001 From: Cedric DOURLENT Date: Fri, 1 Mar 2024 16:42:34 +0100 Subject: [PATCH] build: fix kernel component in CycloneDX SBOM As stated in the cycloneDX documentation, the field "type" is mandatory for all components. More details here (https://cyclonedx.org/docs/1.5/json/#components_items_type) Signed-off-by: Cedric DOURLENT --- scripts/package-metadata.pl | 2 ++ 1 file changed, 2 insertions(+) diff --git a/scripts/package-metadata.pl b/scripts/package-metadata.pl index 9e0e6dd9e5..a46f819ab5 100755 --- a/scripts/package-metadata.pl +++ b/scripts/package-metadata.pl @@ -677,6 +677,7 @@ sub gen_image_cyclonedxsbom() { license => "GPL-2.0", cpe_id => "cpe:/o:linux:linux_kernel", name => "kernel", + category => "operating-system", }; my %abimap; @@ -705,6 +706,7 @@ sub gen_image_cyclonedxsbom() { if ($pkg->{category}) { my $category = $pkg->{category}; my %cat_type = ( + "operating-system" => "operating-system", "Firmware" => "firmware", "Libraries" => "library" );