Joshua Watt ca3a1f17cc sstatesig: Include all dependencies in SPDX task signatures ...

SDPX generation involves looking through BB_TASKDEPDATA for
dependencies, then linking to the generated documents for those
dependencies. These document links use a checksum to validate the
document, which means that if a upstream document changes, all
downstream documents must be regenerated to get the new checksum,
otherwise the compendium of documents produced by the build will have
broken links; therefore all dependent task should be included in the
signature (even from "ABI safe" recipes).

(From OE-Core rev: 7549429fc93218dee33b216010b2c36a9f814091)

Signed-off-by: Joshua Watt <JPEWhacker@gmail.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
(cherry picked from commit 5fe543b9ceec971cf0297ff0ae3b0ccc4703cece)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2022-08-01 16:27:30 +01:00

..

bblayers

bitbake-bblayers/create: Add optional layerid argument

2021-03-06 22:39:04 +00:00

oe

sstatesig: Include all dependencies in SPDX task signatures

2022-08-01 16:27:30 +01:00

oeqa

selftest/runtime_test/virgl: Disable for all almalinux

2022-07-25 15:11:46 +01:00

buildstats.py

libc_package/buildstats: Fix python regex quoting warnings

2021-09-26 16:35:00 +01:00

rootfspostcommands.py

meta/lib+scripts: Convert to SPDX license headers

2019-05-09 16:31:55 +01:00