poky/meta/classes
Daniel Turull 33fd6f6e82 spdx: add option to include only compiled sources
When SPDX_INCLUDE_COMPILED_SOURCES is enabled, only include the
source code files that are used during compilation.

It uses debugsource information generated during do_package.

This enables an external tool to use the SPDX information to disregard
vulnerabilities that are not compiled.

As example, when used with the default config with linux-yocto, the spdx size is
reduced from 156MB to 61MB.

Tested with bitbake world on oe-core.

CC: Quentin Schulz <quentin.schulz@cherry.de>
CC: Joshua Watt <JPEWhacker@gmail.com>
CC: Peter Marko <peter.marko@siemens.com>
(From OE-Core rev: c6a2f1fca76fae4c3ea471a0c63d0b453beea968)

Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2025-06-17 23:38:18 +01:00
..
toolchain toolchain/gcc/clang: Update PREFERRED_PROVIDER to work with multilibs 2025-06-16 22:26:38 +01:00
archiver.bbclass bitbake.conf/pseudo: Switch from exclusion list to inclusion list 2025-05-12 22:01:56 +01:00
buildhistory.bbclass buildhistory: Update for bitbake changes 2025-03-20 13:50:40 +00:00
buildstats-summary.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
ccache.bbclass ccache.bbclass: Add allowed list for native recipes 2023-08-21 11:34:12 +01:00
ccmake.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
chrpath.bbclass chrpath.bbclass: fix Darwin support 2024-01-15 21:42:15 +00:00
copyleft_compliance.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
copyleft_filter.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
create-spdx-2.2.bbclass spdx: add option to include only compiled sources 2025-06-17 23:38:18 +01:00
create-spdx-3.0.bbclass spdx30: Provide software_packageUrl field in SPDX 3.0 SBOM 2025-05-08 10:28:18 +01:00
create-spdx.bbclass Switch default spdx version to 3.0 2024-07-16 15:00:59 +01:00
cve-check.bbclass cve-check: fix debug message 2025-05-01 14:22:54 +01:00
devtool-source.bbclass devtool-source.bbclass: Do not create annotated tags if tag.gpgSign is set 2025-03-19 12:09:06 +00:00
distrooverrides.bbclass distrooverrides: Move back to classes whilst it's usage is clarified 2022-08-18 10:38:48 +01:00
externalsrc.bbclass externalsrc: fix task dependency for do_populate_lic 2024-01-24 15:46:19 +00:00
extrausers.bbclass classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables 2023-09-09 22:14:41 +01:00
go-vendor.bbclass classes: go-vendor: Change symlink creation. 2025-01-27 15:47:09 +00:00
image-buildinfo.bbclass classes: Drop ';' delimiter from ROOTFS/IMAGE*COMMAND variables 2023-09-09 22:14:41 +01:00
mcextend.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
metadata_scm.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
multilib_global.bbclass base: Switch virtual/cross-XXX to be under recipe specific providers 2025-01-21 23:09:34 +00:00
multilib.bbclass kernel-fit-image.bbclass: add a new FIT image implementation 2025-06-05 11:02:21 +01:00
oelint.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
own-mirrors.bbclass Add GCP fetcher to list of supported protocols 2023-08-14 12:51:21 +01:00
prexport.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
primport.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
recipe_sanity.bbclass recipe_sanity: fix old override syntax 2023-02-08 10:29:01 +00:00
relative_symlinks.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
relocatable.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
remove-libtool.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
report-error.bbclass report-error: Add PN to error report file 2024-12-28 10:57:00 +00:00
rm_work_and_downloads.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
rm_work.bbclass rm_work: handle non-existant stamps directory 2023-01-06 12:03:47 +00:00
sign_ipk.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
sign_package_feed.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
sign_rpm.bbclass sign_rpm.bbclass: fix variable assignment whitespace 2025-04-24 11:27:06 +01:00
spdx-common.bbclass spdx: add option to include only compiled sources 2025-06-17 23:38:18 +01:00
terminal.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
toaster.bbclass toaster.bbclass: fix toaster error caused by tabs in BBLAYERS 2025-06-16 17:57:29 +01:00
typecheck.bbclass classes: Add SPDX license identifiers 2022-08-12 11:58:01 +01:00
useradd_base.bbclass useradd_base: Fix sed command line for passwd-expire 2023-11-21 21:25:41 +00:00
useradd-staticids.bbclass useradd-staticids.bbclass: improve error message 2023-06-15 09:53:38 +01:00
useradd.bbclass useradd.bbclass: Fix order of postinst-useradd-* 2024-02-24 16:10:22 +00:00
vex.bbclass vex: fix rootfs manifest 2025-05-08 10:28:18 +01:00