Add DownloadLocation to all our packages

ko-build · Jul 1, 2022 · fc472b5 · fc472b5
1 parent bf49959
commit fc472b5
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/internal/sbom/spdx.go b/internal/sbom/spdx.go
@@ -71,7 +71,8 @@ func GenerateImageSPDX(koVersion string, mod []byte, img oci.SignedImage) ([]byt
 		ID:   imageID,
 		Name: imgDigest.String(),
 		// TODO: PackageSupplier: "Organization: " + bs.Main.Path
-		FilesAnalyzed: false,
+		DownloadLocation: NOASSERTION,
+		FilesAnalyzed:    false,
 		// TODO: PackageHomePage:  "https://" + bi.Main.Path,
 		LicenseConcluded: NOASSERTION,
 		LicenseDeclared:  NOASSERTION,
@@ -195,6 +196,7 @@ func GenerateIndexSPDX(koVersion string, sii oci.SignedImageIndex) ([]byte, erro
 	doc.Packages = []Package{{
 		ID:               indexID,
 		Name:             d.String(),
+		DownloadLocation: NOASSERTION,
 		FilesAnalyzed:    false,
 		LicenseConcluded: NOASSERTION,
 		LicenseDeclared:  NOASSERTION,