feat: add generated SPDX file on bottling

Homebrew · May 7, 2024 · a43b746 · a43b746
1 parent 802487d
commit a43b746
Show file tree

Hide file tree

Showing 4 changed files with 446 additions and 1 deletion.
diff --git a/Library/Homebrew/Gemfile b/Library/Homebrew/Gemfile
@@ -35,7 +35,7 @@ end
 group :man, optional: true do
   gem "kramdown", require: false
 end
-group :pr_upload, optional: true do
+group :pr_upload, :bottle, optional: true do
   gem "json_schemer", require: false
 end
 group :prof, optional: true do

diff --git a/Library/Homebrew/dev-cmd/bottle.rb b/Library/Homebrew/dev-cmd/bottle.rb
@@ -6,6 +6,7 @@
 require "formula"
 require "utils/bottles"
 require "tab"
+require "sbom"
 require "keg"
 require "formula_versions"
 require "utils/inreplace"
@@ -95,6 +96,8 @@ class Bottle < AbstractCommand
 
       sig { override.void }
       def run
+        Homebrew.install_bundler_gems!(groups: ["bottle"])
+
         if args.merge?
           Homebrew.install_bundler_gems!(groups: ["ast"])
           return merge
@@ -491,6 +494,8 @@ def bottle_formula(formula)
             Tab.clear_cache
             Dependency.clear_cache
             Requirement.clear_cache
+            SBOM.clear_cache
+
             tab = keg.tab
             original_tab = tab.dup
             tab.poured_from_bottle = false
@@ -503,6 +508,9 @@ def bottle_formula(formula)
               tab.write
             end
 
+            sbom = SBOM.create(formula)
+            sbom.write
+
             keg.consistent_reproducible_symlink_permissions!
 
             cd cellar do