This talk will address what was done to extend the SPDX tooling in the Yocto Project to generate SPDX for the Linux kernel. Last year the Yocto Project added support for generating SPDX data from upstream projects that are built for creating an embedded linux image. Initially, that work was done for userspace libraries and applications. The Yocto Project extended the functionality to the kernel. I will provide examples of the output from the kernel and kernel modules using the current tooling and challenges moving forward. Future ideas will be discussed including how to get better details and incorporate additional information about Security related issues.
|I agree to abide by the anti-harassment policy||Yes|