From de794793b072de4ad3bd8f619994a1705c8b6040 Mon Sep 17 00:00:00 2001
From: Davide Gardenal <davide.gardenal@huawei.com>
Date: Mon, 11 Jul 2022 11:53:57 +0200
Subject: [PATCH] CI: add sbom generation on Zephyr
Signed-off-by: Davide Gardenal <davide.gardenal@huawei.com>
---
.oniro-ci/build-generic.yaml | 4 ++++
1 file changed, 4 insertions(+)
diff --git a/.oniro-ci/build-generic.yaml b/.oniro-ci/build-generic.yaml
index bb7631d2..fd12ad90 100644
--- a/.oniro-ci/build-generic.yaml
+++ b/.oniro-ci/build-generic.yaml
@@ -388,6 +388,10 @@
CI_ONIRO_JOB_ARTIFACTS: "*.elf *.bin"
script:
- !reference [.build-image, script]
+ - echo 'INHERIT += "create-spdx"' >> conf/local.conf
+ - echo 'do_create_spdx[nostamp] = "1"' >> conf/local.conf
+ - echo 'do_create_runtime_spdx[nostamp] = "1"' >> conf/local.conf
+ - bitbake --runall=do_create_runtime_spdx $CI_ONIRO_RECIPE_NAME
# This job is currently used to customize the behavior in oniro and xts-acts.
# It will be removed when that is safe to do so. It is not documented.
--
GitLab