Bug 13321

Summary: Integrate fossology copyright scanning into an OE build
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Richard Purdie <richard.purdie>
Component: Scripts and ToolsAssignee: Unassigned <unassigned>
Status: NEW --- QA Contact:
Severity: enhancement    
Priority: Medium CC: akuster, niko.mauno, randy.macleod, ross.burton
Version: 5.99   
Target Milestone: Future   
Hardware: x86   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: Yes (doc changes required)

Description Richard Purdie 2019-05-02 13:17:33 UTC
Fossology has split out some of its tools to be usable individually. Ultimately we want to be able to generate SPDX manifests for any output binary we generate. As part of this we'd ideally want to pull together copyright information.

This enhancement is to run the copyright scanner component of fossology and allow a summary to be generated for each recipe. Ultimately this would be used for the final SPDX manifest.

One of the reasons to do this is to explore how these tools can be integrated into our build process. If there are integration issues we should work with the upstream maintainers to try and find ways to allow the integration to work well.
Comment 1 Armin Kuster 2020-01-09 16:04:26 UTC
moving to future
Comment 2 Randy MacLeod 2022-01-20 16:25:05 UTC
Still reasonable. Might be related to work in meta-sca.
Comment 3 Randy MacLeod 2023-10-24 14:24:25 UTC
Bulk move from 4.99 or 0.00 to 5.99