Uploaded image for project: 'PROFINET Core'
  1. PROFINET Core
  2. PSPNCORE-836

modify SBOM to match newest requirement definition and update all external components

    Details

    • Type: Change
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: V1.16.0.1, V1.16.1.0
    • Component/s: None
    • Labels:
      None
    • Account:
      SPC Toolbox (SPCTOOLBOX)

      Description

      In order to meet newest SBOM definition, some adjustments are required:

      • update waf to V1.14.0.3
      • rename project's own sbom template file from "sbom.json" to "cdx.json"
      • add schema reference to the top of the file:
        "$schema": "https://cyclonedx.org/schema/bom-1.6.schema.json",
      • correct entry metadata.component.references to metadata.component.externalReferences
      • add copyright statement to project's own sbom template (metadata.component)
        metadata.component.copyright:
        "copyright" : "Copyright (c) Hilscher Gesellschaft fuer Systemautomation mbH",
      • add manufacturer statement to project's own sbom template (metadata.component)
      • metadata.component.manufacturer.name & metadata.component.manufacturer.url
      •       "manufacturer": {
                "name": "Hilscher Gesellschaft fuer Systemautomation mbH",
                "url": [
                  "https://www.hilscher.com"
                ]
              }
      • If not yet present, add name to project's own sbom template (metadata.component)
        metadata.component.name:
        "name" : "Name of JIRA Project",
      • update all external components to newest available versions addressing SBOM requirements
        • HilscherDefinitions 20250219-00
        • RegisterDefinitions 20250220-00
        • eCos V2.4.0.4
        • eCos Middleware V2.4.0.1
        • FirmwareToolbox V1.3.0.3
        • OSAL V2.4.0.1
        • libstorage V2.0.0.2
        • netX Toolbox V1.9.0.2
        • HAL Toolbox V1.8.0.1
        • PS Toolbox V1.7.0.1
        • Debug Toolbox V0.0.14.0
        • rcX Toolbox V1.11.0.1
        • mbedTLS V1.5.0.8
        • Authentication Manager V1.4.0.4
        • GenericAP Task V1.6.0.2
        • ConfigManager V1.7.0.1
        • Driver Phy V1.3.0.1
        • Driver Ethernet V2.0.0.1
        • Driver Ethernet StandardMAC Adapter V1.4.0.1
        • Driver Ethernet GCI Adapter V1.4.0.0
        • LWIP V5.4.0.3
        • LLDP V5.5.0.1
        • DCERPC V5.6.0.1
      • provide additional cdx.json file for PN_Device library and PN_Controller library

        Attachments

          Issue Links

            Expenses

              Activity

                Status Description

                  People

                  • Reporter:
                    BMeyer Benjamin Meyer
                  • Votes:
                    0 Vote for this issue
                    Watchers:
                    0 Start watching this issue

                    Dates

                    • Created:
                      Updated:
                      Resolved: