staging/stintel/scripts/make-sbom.py, branch masterStaging tree of Stijn Tintelhttps://git.openwrt.org/openwrt/staging/stintel/atom?h=master2026-05-17T10:21:09Zbuild: add CycloneDX SBOM processing to apk2026-05-17T10:21:09ZFlorian Eckert2025-09-30T12:49:52Zurn:sha1:10d9dbe838447b79a616cf4b0e149b7e398df46a
Currently, there is no SBOM generation in imagebuilder when the package
system 'apk' is used. This commit adds this feature back. This already
worked for the package system 'opkg'.
Furthermore, generating the SBOM using perl is not reproducible if the
input data has not changed. A different file is always generated. This is
not the case with Python. For this reason, Python is now used to generate
the SBOM for the imagebuilder.
The script has already been prepared so that it can also process the opkg
package system for generating the SBOM.
Signed-off-by: Florian Eckert <fe@dev.tdt.de>