Skip to content

Add Part 2: Yocto SPDX 2.2 pipeline deep-dive#82

Merged
vpetersson merged 1 commit into
add-author-jwattfrom
yocto-sbom-part-2
May 14, 2026
Merged

Add Part 2: Yocto SPDX 2.2 pipeline deep-dive#82
vpetersson merged 1 commit into
add-author-jwattfrom
yocto-sbom-part-2

Conversation

@vpetersson
Copy link
Copy Markdown
Contributor

Summary

  • Adds Part 2 of the Yocto SBOM series: A Deep Dive into Yocto's SPDX 2.2 Pipeline — covers the three core BitBake tasks, the document-linking tarball model, and the VEX gap that motivates the move to SPDX 3.0.
  • Updates Part 1's series footer (content/posts/2026-05-05-...md) to link to Part 2.

Stacked on #81 (Add Joshua Watt + Part 1). Merge #81 first; this PR's base will then auto-update to master.

Test plan

  • Visit /2026/05/12/yocto-spdx-2-2-pipeline/ — confirm post renders
  • Visit /2026/05/05/yocto-sbom-deep-dive-introduction/ — confirm series footer Part 2 entry is now a real link, others still (coming soon)
  • Visit /authors/jwatt/ — confirm both posts listed
  • Confirm Hugo build succeeds (hugo --buildFuture)
  • Confirm dprint markdown lint passes (bun run lint)

🤖 Generated with Claude Code

Walks through the three core BitBake tasks (do_create_spdx,
do_create_runtime_spdx, do_create_image_spdx), the document-linking
model that bundles per-recipe SPDX into a tarball, and explains why
SPDX 2.2 has no native VEX support — motivating the move to SPDX 3.0
covered in Part 3.

Updates Part 1's series footer to link to Part 2.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@vpetersson vpetersson merged commit 3004a74 into add-author-jwatt May 14, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants