sbom: add purl support

In case a package specifies a purl, use it as is
msys2 · Mar 24, 2024 · acfd133 · acfd133
1 parent 2e293c7
commit acfd133
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/msys2_devtools/sbom.py b/msys2_devtools/sbom.py
@@ -81,6 +81,15 @@ def write_sbom(srcinfo_cache: str, sbom: str) -> None:
                     )
                     bom.components.add(component2)
                     bom.register_dependency(root_component, [component2])
+                elif extra_key == "purl":
+                    purl = PackageURL.from_string(extra_value + "@" + pkgver)
+                    component3 = Component(
+                        name=pkgbase,
+                        version=pkgver,
+                        purl=purl
+                    )
+                    bom.components.add(component3)
+                    bom.register_dependency(root_component, [component3])
 
     my_json_outputter: 'JsonOutputter' = JsonV1Dot5(bom)
     serialized_json = my_json_outputter.output_as_string(indent=2)