diff options
| author | Joshua Watt <JPEWhacker@gmail.com> | 2022-07-15 08:47:47 -0500 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2022-08-01 16:27:30 +0100 |
| commit | ca3a1f17cc672c74272f8e1797d345051bf9821f (patch) | |
| tree | 342619116b71bce52d5d66d477381521feef4e99 /scripts/lib/devtool/package.py | |
| parent | db4ce356a84df1a50ae95df17c172a36d0023975 (diff) | |
| download | poky-ca3a1f17cc672c74272f8e1797d345051bf9821f.tar.gz | |
sstatesig: Include all dependencies in SPDX task signatures
SDPX generation involves looking through BB_TASKDEPDATA for
dependencies, then linking to the generated documents for those
dependencies. These document links use a checksum to validate the
document, which means that if a upstream document changes, all
downstream documents must be regenerated to get the new checksum,
otherwise the compendium of documents produced by the build will have
broken links; therefore all dependent task should be included in the
signature (even from "ABI safe" recipes).
(From OE-Core rev: 7549429fc93218dee33b216010b2c36a9f814091)
Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 5fe543b9ceec971cf0297ff0ae3b0ccc4703cece)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'scripts/lib/devtool/package.py')
0 files changed, 0 insertions, 0 deletions