Details
Description
In order to meet newest SBOM definition, some adjustments are required:
- update waf to V1.14.0.3
- rename project's own sbom template file from "sbom.json" to "cdx.json"
- add schema reference to the top of the file:
"$schema": "https://cyclonedx.org/schema/bom-1.6.schema.json",
- correct entry metadata.component.references to metadata.component.externalReferences
- add copyright statement to project's own sbom template (metadata.component)
metadata.component.copyright:"copyright" : "Copyright (c) Hilscher Gesellschaft fuer Systemautomation mbH",
- add manufacturer statement to project's own sbom template (metadata.component)
- metadata.component.manufacturer.name & metadata.component.manufacturer.url
-
"manufacturer": { "name": "Hilscher Gesellschaft fuer Systemautomation mbH", "url": [ "https://www.hilscher.com" ] }
- If not yet present, add name to project's own sbom template (metadata.component)
metadata.component.name:"name" : "Name of JIRA Project",
- update all external components to newest available versions addressing SBOM requirements
- HilscherDefinitions 20250219-00
- RegisterDefinitions 20250220-00
- eCos V2.4.0.4
- eCos Middleware V2.4.0.1
- FirmwareToolbox V1.3.0.3
- OSAL V2.4.0.1
- libstorage V2.0.0.2
- netX Toolbox V1.9.0.2
- HAL Toolbox V1.8.0.1
- PS Toolbox V1.7.0.1
- Debug Toolbox V0.0.14.0
- rcX Toolbox V1.11.0.1
- mbedTLS V1.5.0.8
- Authentication Manager V1.4.0.4
- GenericAP Task V1.6.0.2
- ConfigManager V1.7.0.1
- Driver Phy V1.3.0.1
- Driver Ethernet V2.0.0.1
- Driver Ethernet StandardMAC Adapter V1.4.0.1
- Driver Ethernet GCI Adapter V1.4.0.0
- LWIP V5.4.0.3
- LLDP V5.5.0.1
- DCERPC V5.6.0.1
- provide additional cdx.json file for PN_Device library and PN_Controller library
Attachments
Issue Links
- is cloned by
-
PSPNDIF-338 modify SBOM to match newest requirement definition and update all external components
-
- Closed
-
-
PSPNMV3-953 modify SBOM to match newest requirement definition and update all external components
-
- Closed
-
-
PSPNSV4-1612 modify SBOM to match newest requirement definition and update all external components
-
- Closed
-
- mentioned in
-
Page Loading...