Comments (1)
Currently, we have two mechanisms in place that help dealing with source code differences between osselot curated data and openembedded source code (including patches):
OSSELOT_IGNORE_SOURCE_GLOBS
variable: This variable can be used to ignore any file (globs) which are irrelevant in regards to openembbeded license compliance. This could be test files or pre-run configure steps from release packages (see Open-Source-Compliance/package-analysis#67).OSSELOT_HASH_EQUIVALENCE
variable: This variable can be used to define equivalence (from a curation perspective) between one or more file versions. As openembedded patches usually do not add copyright holders or other license information (do validate this beforehand), this variable can be used to signal curation equivalence in these cases.
However, these two mechanisms currently do not cover cases where patches add additional, or change curation relevant data. I am yet to encounter a relevant case, but if this happens we need to deal with this. One option could be to add patches to the osselot-package-analysis-native.bb recipe, however I am not sure how well this would scale.
from meta-osselot.
Related Issues (17)
- Add option to override used package name and version
- Fix bitbake QA issue HOT 2
- Add checksum equivalence functionality
- make skipped package suffixes configurable
- Evaluate options to identify build-relevant files
- fix Python bbappends
- Make OSSELOT_HASH_EQUIVALENCE work with all supported hash algorithms, regardless of OSSELOT_HASH_ALGORITHM setting
- Allow defining multiple output formats
- meta-osselot only works with single-project recipes
- Optimize IO heavy checksum tasks
- Wrong source list & race condition in do_osselot_create_s_checksums when S == WORKDIR
- Exception: AttributeError: module 'hashlib' has no attribute 'file_digest' HOT 12
- meta-osselot should work with Python 3.8
- Add support for OSSELOT_IGNORE within recipes
- Add workflow for package version mismatches
- Exclude build-time packages (as far as possible)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from meta-osselot.