SPDX SBOM Generation Tool Proposed For The Linux Kernel

A proposed patch for the Linux kernel introduces an SPDX SBOM generation tool that creates three JSON documents describing build outputs, source files with licensing information, and the build process linking them together. The optional tool, enabled via CONFIG_SBOM, runs after the build and reconstructs the dependency graph Show more