Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

feat(deb): add debian binary parsing support #2

Merged
merged 1 commit into from
Mar 16, 2023

Conversation

rchincha
Copy link
Contributor

@rchincha rchincha commented Mar 6, 2023

No description provided.

@rchincha
Copy link
Contributor Author

rchincha commented Mar 6, 2023

$ bin/sbom busybox_1%3a1.30.1-7ubuntu3_amd64.deb

arg: busybox_1%3a1.30.1-7ubuntu3_amd64.deb

LICENSE found

{SPDXVersion:SPDX-2.3 DataLicense: SPDXIdentifier: DocumentName: DocumentNamespace: ExternalDocumentReferences:[] DocumentComment: CreationInfo:<nil> Packages:[0xc0000e61e0] Files:[] OtherLicenses:[] Relationships:[] Annotations:[] Snippets:[] Reviews:[]}

@rchincha rchincha force-pushed the deb branch 3 times, most recently from b558c4e to b4ab4fb Compare March 7, 2023 04:56
@rchincha
Copy link
Contributor Author

rchincha commented Mar 7, 2023

bin/sbom generate -i busybox_1%3a1.30.1-7ubuntu3_amd64.deb

SPDXVersion: SPDX-2.2
DataLicense: CC0-1.0
SPDXID: SPDXRef-DOCUMENT
DocumentName: SBOM-SPDX-3a529523-a64e-43d6-b32f-03ea2878da8c
Creator: Person: Kubernetes Release Managers (release-managers@kubernetes.io)
Creator: Tool: k8s.io/release/pkg/spdx
Created: 2023-03-07T04:54:26Z


##### Package: busybox

PackageName: busybox
SPDXID: SPDXRef-Package-busybox
PackageDownloadLocation: NONE
FilesAnalyzed: false
PackageLicenseConcluded: NOASSERTION
PackageVersion: 1:1.30.1-7ubuntu3
PackageLicenseDeclared: NOASSERTION
PackageCopyrightText: NOASSERTION

FileName: /
SPDXID: SPDXRef-File-e4d29517691d88fb770f6cb426f715cae2f89d7d
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION

Relationship: SPDXRef-Package-busybox CONTAINS SPDXRef-File-e4d29517691d88fb770f6cb426f715cae2f89d7d
FileName: /bin/
SPDXID: SPDXRef-File-9b8aef363cff4efef3883dbbdde0d7f3d7f6ab69
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION

Relationship: SPDXRef-Package-busybox CONTAINS SPDXRef-File-9b8aef363cff4efef3883dbbdde0d7f3d7f6ab69
FileName: /bin/busybox
SPDXID: SPDXRef-File-2b993868a03c685e654b594cf3791e556b7f5530
LicenseConcluded: NOASSERTION
LicenseInfoInFile: NOASSERTION
FileCopyrightText: NOASSERTION
....

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
@rchincha rchincha merged commit a0a0567 into project-stacker:main Mar 16, 2023
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant