mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-23 01:11:53 -09:00
26723c2fd1
The CycloneDX spec defines the "components.pedigree.patches.resolves" object [1] as supporting both a "name" & "id" property. The definition provided for the "id" property is the following [2]: > The identifier of the issue assigned by the source of the issue And for the "name" property [3]: > The name of the issue The "resolves" object was introduced in commit [4] and only used the "name" property to link to the vulnerability it resolves. In example [5] provided on the CycloneDX website, both the "name" & "id" properties are set in the security example. In the vulnerability context, and more precisely the CVEs, the "name" and the "id" are the same and thus the value can be duplicated across the two properties. This commit replicates the behavior documented in [5] to improve compatibility with tools. [1] https://cyclonedx.org/docs/1.6/json/#components_items_pedigree_patches_items_resolves [2] https://cyclonedx.org/docs/1.6/json/#components_items_pedigree_patches_items_resolves_items_id [3] https://cyclonedx.org/docs/1.6/json/#components_items_pedigree_patches_items_resolves_items_name [4]9415529923utils/generate-cyclonedx: add support for 'resolved_with_pedigree' [5] https://cyclonedx.org/use-cases/pedigree/ Signed-off-by: Thomas Perale <thomas.perale@mind.be> Reviewed-by: Quentin Schulz <quentin.schulz@cherry.de> Signed-off-by: Arnout Vandecappelle <arnout@rnout.be> (cherry picked from commit074e650219) Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>
Buildroot is a simple, efficient and easy-to-use tool to generate embedded Linux systems through cross-compilation. The documentation can be found in docs/manual. You can generate a text document with 'make manual-text' and read output/docs/manual/manual.text. Online documentation can be found at https://buildroot.org/docs.html To build and use the buildroot stuff, do the following: 1) run 'make menuconfig' 2) select the target architecture and the packages you wish to compile 3) run 'make' 4) wait while it compiles 5) find the kernel, bootloader, root filesystem, etc. in output/images You do not need to be root to build or run buildroot. Have fun! Buildroot comes with a basic configuration for a number of boards. Run 'make list-defconfigs' to view the list of provided configurations. Please feed suggestions, bug reports, insults, and bribes back to the buildroot mailing list: buildroot@buildroot.org You can also find us on #buildroot on OFTC IRC. If you would like to contribute patches, please read https://buildroot.org/manual.html#submitting-patches