Skip to content

add command to collect SPDX files from pool based on tags

Not all machines, flavours and image types will be part of Oniro release.

Therefore, in order to generate a comprehensive SPDX SBOM for a release, we would need to filter all spdx files generated by Fossology+A4F based on tinfoilhat tags.

It should be possible to use regular expressions to include multiple machine/flavour/image combinations at once

Meaningless example:

^oniro/kirkstone-v2.0.0-beta/oniro-linux-(gcc|clang)/(seco-intel-b68|seco-imx8mm-c61[^/]+)/oniro-image-(base|extra)-dev$