From patchwork Mon Nov 17 13:24:28 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Felix Moessbauer X-Patchwork-Id: 4599 Return-Path: Received: from shymkent.ilbers.de ([unix socket]) by shymkent (Cyrus 2.5.10-Debian-2.5.10-3+deb9u2) with LMTPA; Mon, 17 Nov 2025 14:25:02 +0100 X-Sieve: CMU Sieve 2.4 Received: from mail-qv1-f56.google.com (mail-qv1-f56.google.com [209.85.219.56]) by shymkent.ilbers.de (8.15.2/8.15.2/Debian-8+deb9u1) with ESMTPS id 5AHDP0U5024990 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT) for ; Mon, 17 Nov 2025 14:25:01 +0100 Received: by mail-qv1-f56.google.com with SMTP id 6a1803df08f44-882376d91besf141684786d6.3 for ; Mon, 17 Nov 2025 05:25:01 -0800 (PST) ARC-Seal: i=3; a=rsa-sha256; t=1763385894; cv=pass; d=google.com; s=arc-20240605; b=K6wOPge3Gl4KWXPPVeUPXnlGipeHzE66pAKzdd32ArjxSvNEMSRtZlNFXeydjmUjWl CnNKiYt3NLndAuer0t0seTmC1sJsDsSdmv8jq4vabXp7N0DsbS3ni+dIk9rPVOk8xCjO byhXcCmNQ/Jnz4EGVZXOl2SYJ0hmR+5F0n4Jr5t+JtFWthj5vG9AlxPJzU5Zh7iKgo3J iTL36WgIt+71EctuT5d4rLIdzXlC32mEfX+iQmB9csTH7rHwiZj4doZVppOpxkQuY171 yc3x7VBpbePzAL/eUY6kry5s8NoTdWAmBRLaNwRtlLQpdWm8UYKn4xQh74/2zNy5o+l1 tHKA== ARC-Message-Signature: i=3; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to:mime-version:references :in-reply-to:message-id:date:subject:cc:to:from:dkim-signature; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; fh=KWJr4CETnse7/HQzaWqq6ru4mUEtNBzxvFiwvCUUfwY=; b=XCKM/ILK5AXHNgUIOEQAXkWUk8pswi0Jn4wqVY+SYuz8zy/MX8+9lbPzhogR5CESTJ h0FElsqPeoRgTAEz6d6e9fkbIq4634Qlcr2fCDegKzRdy3FJszdW5fYP22Yg4iiWUfH+ S+Ntu3GvBmfS4YpUK1FjgmO4cZEqSVkgiUR+I9KlzsMYjcRVrA9VKlWN+HraBIcTxlVC XqIV9J9ypxiwdfMf+QKiEN9hWQid/UJGoBIllzqyHzkBv5oXQkMctjWrmECv/E0IXfxK mTG55AzsjPrWmy9ZqR7iVg299JSC7L+X+zyhKU9K/WGA8jLQ8AkxPlgnDvPRXikJFlug Ou8g==; darn=isar-build.org ARC-Authentication-Results: i=3; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlegroups.com; s=20230601; t=1763385894; x=1763990694; darn=isar-build.org; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from:from:to :cc:subject:date:message-id:reply-to; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; b=oeJwLPcoyXVa9ku6gZab6siVeBxCz/4WrQKxVE5qOJIe84vbNmLwrXTQclh+2YLuEM xaaqcHh+an/umdmwFKFWi9eL38y9dZdu/doRZ/T6/bYB6kkAz1cdJ7CVOGcv3Yes9TlV NR6HpYot8F/SxzJK3VtHmp0Enr0fcUXO7bPRcdFBIAkYaAJAySZrj1ESKPUreB3WjhZD AS4kPlhcH6ElF/5FnRpLNj6tFsK6ywU+oRiuVfGdoTGMo/SePAfMTCj3kJPeAlhWSAJm TwcTSDnXo78LsUShn/sn9FDaGyUt5x/u5TXu5yomzyfxM7Ti1U0BwkGF15C0KG3yIKju lllg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1763385894; x=1763990694; h=list-unsubscribe:list-subscribe:list-archive:list-help:list-post :x-spam-checked-in-group:list-id:mailing-list:precedence:reply-to :x-original-authentication-results:x-original-sender:mime-version :references:in-reply-to:message-id:date:subject:cc:to:from :x-beenthere:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to; bh=KX0NeX7KNSazMmp7D9UEL0udbYGdajb0S7Qa5Vcy5S8=; b=O9jiw+eh83WGNG84FLHBapGNC1asehQDn3r00oQmqzB/56kLhGClVSspFz4G85K9pi RWm6wqguJs3jlaK6gQRIR/tU4OCx9xIFne3UB1ZtYLdexORBltQT+e6vDX2OqtvXj/Wb 4/Tdt1+ss6f2SR4ds+S+oCXaf9NFt7WWPPchsBJ25GdscFBX0G03un4joUb4q5i9Phka wL+UuzlJaG5VI2mEgVYGSNRHKR5NV2qsVc7OlwXdhvC1CVKRtFrGHhwIFvnC09Vg2IjD +G6vKDo7doOiO1b0eVAObSQKDllk1LX3ewlc1skQDftBL3V7ZXAyso+EtSniN0EMvzUn neTg== X-Forwarded-Encrypted: i=3; AJvYcCX0jPr8fZ1Pa2trw3pMfa9QPl/bgAgu7srTPJkBTo65hMjjKQKQFN3toTG29nr6epYSU9rh1oY=@isar-build.org X-Gm-Message-State: AOJu0YxnF1Qf3s6ggtQJxbqbR/CHEJR1C28krphwKgPvpguiyZpJxuwY PjSMDZjJSJyTmn0UaoF9+z+kKF4e9tekQJtjY7NsSRfnm9nV3A7ctivj X-Google-Smtp-Source: AGHT+IF/3owJqIG1hQ18DfBS+CxtJRmNlc9UB/LgnS2Bvj7RvQaXLTnUQFi7V++sS9S8JjtHKsWAiQ== X-Received: by 2002:a05:6214:e67:b0:880:5b9a:72f2 with SMTP id 6a1803df08f44-882925c0b39mr139999316d6.20.1763385893810; Mon, 17 Nov 2025 05:24:53 -0800 (PST) X-BeenThere: isar-users@googlegroups.com; h="Ae8XA+Ygyu7YtKA8gtRjPr7ckCBfUrsmIW3Y/HLWv+FMOlE88A==" Received: by 2002:a05:6214:230c:b0:880:59ee:bbc with SMTP id 6a1803df08f44-88281af20a6ls94408606d6.1.-pod-prod-09-us; Mon, 17 Nov 2025 05:24:52 -0800 (PST) X-Received: by 2002:a05:6122:2191:b0:54a:9cff:6fe7 with SMTP id 71dfb90a1353d-55b1bd4b7b8mr4213405e0c.4.1763385891886; Mon, 17 Nov 2025 05:24:51 -0800 (PST) ARC-Seal: i=2; a=rsa-sha256; t=1763385891; cv=pass; d=google.com; s=arc-20240605; b=XWP6knr/V6cEnQ0eG+t7P7BEy/0mbMKeGFXQE18N1St92+BqESnLe/Jt4JCO41W9lt wiu9RgsYnupRNnVjKUDqKT5TAEHs1vsna9dGBTYMgD5LgDl0RJyNsYWewFBZTutCw3+L Tt+uPQ7hN9E+Ki3hL/MO1XVd5gVt3cNuuH76DqPUqPIy8zp7HcNXa+/DbYQ7ugYqU4l7 4oZIX5MpOkA2GvgFxLH9eh1Z415zua3Cwq0eZMaHSVUJaKupPeHMPXPcR1ex00ZYM89O cdd71HQ0AU7UvMfsAbPIqQTamZSuv3omOiFlt//E11xkn98CQX4jMbpXLdRiPQRulzRm iE+A== ARC-Message-Signature: i=2; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20240605; h=mime-version:content-transfer-encoding:references:in-reply-to :message-id:date:subject:cc:to:from:dkim-signature; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; fh=zpIZCuRUq+NRP8FVcTlT37OsigfSlMKhj97kagpZeyo=; b=l1HpiBDZrrvE8X6eaqHwHHNmNfdwpBYSp1sP2kDHNdLO9tca+1+1Sp3dX+FbUkua1a 55DBI/pv4k/5qiE+dE51wE9y1vdIwPgeF3Qqi86mE0rMvAh5fcRTPs26KGYrvz+ceuPX wuSeDF/KJWuzK/G7e/f0t1MdIWomsHltQS+24rzDysboEyUVN2RozI/i9w/+0lyKU8rH SN9VAoHY7W5nP44w2xU3eMQ3Z7GrQ/T6FMl4xG/hZPliJUh+qCqbWR1RKSDVl+3vdw+6 QweGuwWLi+fxNjNwwbV/whMOf+D92nznetZaTslD+iPInT5fxQ3DBXZQu1xcsyKT/A2k /ixA==; dara=google.com ARC-Authentication-Results: i=2; gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com Received: from MRWPR03CU001.outbound.protection.outlook.com (mail-francesouthazlp170110003.outbound.protection.outlook.com. [2a01:111:f403:c207::3]) by gmr-mx.google.com with ESMTPS id 71dfb90a1353d-55b0f8ec887si629239e0c.3.2025.11.17.05.24.51 for (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Mon, 17 Nov 2025 05:24:51 -0800 (PST) Received-SPF: pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) client-ip=2a01:111:f403:c207::3; ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=alFNzwhPYyPma4sKnbgp8sEj45Eq55PDNev/tXXnleQoQibaNc9QGO3ZJ/LRURQrWrkxWpEzMEyoqIT3HOc2BTfj+fghuWv+ZrxTOMcI0eU8Xf4hvAqxSvpt8T1fGu0aaRSrVcgru5eNxHKfvY4H/dQgvzELRpM/x9/tfwtiJ1jojuRaXkrAogtdj1t15Akeax9tX1LRsR/tCstWTgZnC6+ZsmnVqdntkQWZlknKTDyYtQMOwcld+XutAK63DW51gkE3gmU52ToCkUTE1rpBUsZnWJBDuaHIeaVgwVKgyMMpQ4YVZzJSSeDXA3njPov+XeOtspZM+kbvYbszoqxlCw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=6M05J8cNSbyYYTZwjED5ijYHSbZzsHsJMOQkteSubbA=; b=DQp9HTjcQXD+EhRtZpwn7T9si7Qy6DlXJsuOBcObuonsPZKlSaI7SHQpDJ0kQvQTm1cFxVxYVGVndb7wGP1ckeXbz1SFR4pDUI35HpaVHwO1u4Ec8y6lTuskKryZ4X6rVKk2MIyH7nsEpLQBFrbNzaZ1C5PCjGlIRJQ5/JOF0FhJFrMOSQqPUrtwMqtsG81StTT98NmwHn8+m7CIytFLm41fVB1/AmPsZBsaJDXnMc6I0zu6ZQVURqges3uWSmF8x9Ovo9nA4G7HlD5EaJhktDrYBDyeqQiiHMrx9D/0yCFF1uIZQJv4ATN5LJ9qyY7BIZt+oYFXiRin0nHJ7ex0Kg== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=siemens.com; dmarc=pass action=none header.from=siemens.com; dkim=pass header.d=siemens.com; arc=none Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) by PAWPR10MB8044.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:102:383::22) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9320.21; Mon, 17 Nov 2025 13:24:47 +0000 Received: from DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe]) by DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM ([fe80::8198:b4e0:8d12:3dfe%4]) with mapi id 15.20.9320.021; Mon, 17 Nov 2025 13:24:47 +0000 X-Patchwork-Original-From: "'Felix Moessbauer' via isar-users" From: Felix Moessbauer To: isar-users@googlegroups.com Cc: christoph.steiger@siemens.com, cedric.hombourger@siemens.com, jan.kiszka@siemens.com Subject: [PATCH v4 02/10] meta: package python libraries for SBOM generation Date: Mon, 17 Nov 2025 14:24:28 +0100 Message-ID: <20251117132436.511686-3-felix.moessbauer@siemens.com> X-Mailer: git-send-email 2.51.0 In-Reply-To: <20251117132436.511686-1-felix.moessbauer@siemens.com> References: <20251117132436.511686-1-felix.moessbauer@siemens.com> X-ClientProxiedBy: FR5P281CA0026.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:f1::11) To DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM (2603:10a6:10:47f::13) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DU0PR10MB6828:EE_|PAWPR10MB8044:EE_ X-MS-Office365-Filtering-Correlation-Id: 258bb7f3-e08f-40de-c33e-08de25dcae0f X-MS-Exchange-AtpMessageProperties: SA X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0;ARA:13230040|366016|1800799024|376014; X-Microsoft-Antispam-Message-Info: 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 X-Forefront-Antispam-Report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(366016)(1800799024)(376014);DIR:OUT;SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: 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 X-OriginatorOrg: siemens.com X-MS-Exchange-CrossTenant-Network-Message-Id: 258bb7f3-e08f-40de-c33e-08de25dcae0f X-MS-Exchange-CrossTenant-AuthSource: DU0PR10MB6828.EURPRD10.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Nov 2025 13:24:47.8700 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 38ae3bcd-9579-4fd4-adda-b42e1495d55a X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: GUUuMA+EInRmXBQJUKxkcsYAmi9S86x8nhShOOAOZylhsbyYo7/yVokYoEUgeWuzXzkDl+45tPxEDXEExCkYIPC8FOUS/N/OwVe+kl/mVQ0= X-MS-Exchange-Transport-CrossTenantHeadersStamped: PAWPR10MB8044 X-Original-Sender: felix.moessbauer@siemens.com X-Original-Authentication-Results: gmr-mx.google.com; dkim=pass header.i=@siemens.com header.s=selector2 header.b=xcB9fxUI; arc=pass (i=1 spf=pass spfdomain=siemens.com dkim=pass dkdomain=siemens.com dmarc=pass fromdomain=siemens.com); spf=pass (google.com: domain of felix.moessbauer@siemens.com designates 2a01:111:f403:c207::3 as permitted sender) smtp.mailfrom=felix.moessbauer@siemens.com; dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=siemens.com X-Original-From: Felix Moessbauer Reply-To: Felix Moessbauer Precedence: list Mailing-list: list isar-users@googlegroups.com; contact isar-users+owners@googlegroups.com List-ID: X-Spam-Checked-In-Group: isar-users@googlegroups.com X-Google-Group-Id: 914930254986 List-Post: , List-Help: , List-Archive: , List-Unsubscribe: , X-Spam-Status: No, score=-4.9 required=5.0 tests=DKIMWL_WL_MED,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,MAILING_LIST_MULTI, RCVD_IN_DNSWL_BLOCKED,RCVD_IN_MSPIKE_H2,RCVD_IN_RP_CERTIFIED, RCVD_IN_RP_RNBL,RCVD_IN_RP_SAFE,SPF_PASS autolearn=unavailable autolearn_force=no version=3.4.2 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shymkent.ilbers.de X-getmail-retrieved-from-mailbox: =?utf-8?q?INBOX?= From: Christoph Steiger Package python libraries for SBOM generation in isar. The packages are unfortunately not (yet) packaged in Debian, thats why we need to do it here. With these libraries it is now possible to easily create CDX and SPDX SBOMs in different file formats. Signed-off-by: Christoph Steiger --- .../python3-beartype/files/rules | 8 ++++ .../python3-beartype_0.19.0.bb | 29 +++++++++++ .../files/pybuild.testfiles | 1 + .../python3-cyclonedx-lib/files/rules | 8 ++++ .../python3-cyclonedx-lib_9.1.0.bb | 48 +++++++++++++++++++ .../python3-packageurl/files/rules | 8 ++++ .../python3-packageurl_0.16.0.bb | 33 +++++++++++++ .../python3-py-serializable/files/rules | 8 ++++ .../python3-py-serializable_2.0.0.bb | 38 +++++++++++++++ .../python3-spdx-tools/files/rules | 25 ++++++++++ .../python3-spdx-tools_0.8.3.bb | 46 ++++++++++++++++++ 11 files changed, 252 insertions(+) create mode 100644 meta/recipes-support/python3-beartype/files/rules create mode 100644 meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles create mode 100644 meta/recipes-support/python3-cyclonedx-lib/files/rules create mode 100644 meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb create mode 100644 meta/recipes-support/python3-packageurl/files/rules create mode 100644 meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb create mode 100644 meta/recipes-support/python3-py-serializable/files/rules create mode 100644 meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb create mode 100644 meta/recipes-support/python3-spdx-tools/files/rules create mode 100644 meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb diff --git a/meta/recipes-support/python3-beartype/files/rules b/meta/recipes-support/python3-beartype/files/rules new file mode 100644 index 00000000..0ca517a1 --- /dev/null +++ b/meta/recipes-support/python3-beartype/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = beartype +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb new file mode 100644 index 00000000..b8bc2708 --- /dev/null +++ b/meta/recipes-support/python3-beartype/python3-beartype_0.19.0.bb @@ -0,0 +1,29 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/beartype-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), dh-python, python3-all, python3-setuptools, pybuild-plugin-pyproject, python3-hatchling" +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +# this is 01/01/1980, any earlier and zip in the wheel building process will not accept it +DEBIAN_CHANGELOG_TIMESTAMP = "315532800" +DESCRIPTION = "Unbearably fast near-real-time hybrid runtime-static type-checking in pure Python." + +SRC_URI = "\ + https://github.com/beartype/beartype/archive/refs/tags/v0.19.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e7ad00eebf527d60f30e0b391209b561dabd2074b608c50e26c94c2d8250a6cd" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles new file mode 100644 index 00000000..cc736a36 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/pybuild.testfiles @@ -0,0 +1 @@ +pyproject.toml diff --git a/meta/recipes-support/python3-cyclonedx-lib/files/rules b/meta/recipes-support/python3-cyclonedx-lib/files/rules new file mode 100644 index 00000000..fe72dd1a --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = cyclonedx-python-lib +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb new file mode 100644 index 00000000..738ed1b3 --- /dev/null +++ b/meta/recipes-support/python3-cyclonedx-lib/python3-cyclonedx-lib_9.1.0.bb @@ -0,0 +1,48 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +DEPENDS:append:bookworm = " python3-packageurl python3-py-serializable" +DEPENDS:append:noble = " python3-packageurl python3-py-serializable" + +S = "${WORKDIR}/cyclonedx_python_lib-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + pybuild-plugin-pyproject, \ + python3-poetry, \ + python3-py-serializable, \ + python3-packageurl, \ + python3-sortedcontainers, \ + python3-ddt, \ + python3-defusedxml, \ + python3-license-expression, \ + python3-jsonschema, \ + python3-lxml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/CycloneDX/cyclonedx-python-lib/releases/download/v9.1.0/cyclonedx_python_lib-9.1.0.tar.gz \ + file://rules \ + file://pybuild.testfiles \ + " +SRC_URI[sha256sum] = "86935f2c88a7b47a529b93c724dbd3e903bc573f6f8bd977628a7ca1b5dadea1" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + cp "${WORKDIR}"/pybuild.testfiles "${S}"/debian + deb_debianize +} diff --git a/meta/recipes-support/python3-packageurl/files/rules b/meta/recipes-support/python3-packageurl/files/rules new file mode 100644 index 00000000..50e1b74c --- /dev/null +++ b/meta/recipes-support/python3-packageurl/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = packageurl-python +export PYBUILD_SYSTEM = distutils + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb new file mode 100644 index 00000000..27209429 --- /dev/null +++ b/meta/recipes-support/python3-packageurl/python3-packageurl_0.16.0.bb @@ -0,0 +1,33 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/packageurl_python-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "debhelper (>= 11~), \ + dh-python, \ + python3-all, \ + python3-setuptools, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "A purl aka. Package URL parser and builder" + +SRC_URI = "\ + https://github.com/package-url/packageurl-python/releases/download/v0.16.0/packageurl_python-0.16.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "69e3bf8a3932fe9c2400f56aaeb9f86911ecee2f9398dbe1b58ec34340be365d" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-py-serializable/files/rules b/meta/recipes-support/python3-py-serializable/files/rules new file mode 100644 index 00000000..0cf845dd --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/files/rules @@ -0,0 +1,8 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = py-serializable +export PYBUILD_SYSTEM = pyproject + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb new file mode 100644 index 00000000..5bc48c0f --- /dev/null +++ b/meta/recipes-support/python3-py-serializable/python3-py-serializable_2.0.0.bb @@ -0,0 +1,38 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/py_serializable-${PV}" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = " \ + dh-sequence-python3, \ + pybuild-plugin-pyproject, \ + python3-all, \ + python3-defusedxml, \ + python3-lxml, \ + python3-poetry-core, \ + python3-setuptools, \ + xmldiff, \ +" + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" + +DESCRIPTION = "Library for serializing and deserializing Python Objects to and from JSON and XML." + +SRC_URI = "\ + https://github.com/madpah/serializable/releases/download/v2.0.0/py_serializable-2.0.0.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "e9e6491dd7d29c31daf1050232b57f9657f9e8a43b867cca1ff204752cf420a5" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +} diff --git a/meta/recipes-support/python3-spdx-tools/files/rules b/meta/recipes-support/python3-spdx-tools/files/rules new file mode 100644 index 00000000..ac87528a --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/files/rules @@ -0,0 +1,25 @@ +#!/usr/bin/make -f + +#export DH_VERBOSE = 1 +export PYBUILD_NAME = spdx-tools +export PYBUILD_SYSTEM = distutils + +# skip tests that require hard-to-package dependencies and tests that rely on relative file paths +# TODO: figure out a way to make these tests work +export PYBUILD_TEST_ARGS=--ignore tests/spdx3/validation/json_ld/test_shacl_validation.py \ + -k 'not test_examples \ + and not test_parse_from_file \ + and not test_annotation_parser \ + and not test_snippet_parser \ + and not test_creation_info_parser \ + and not test_json_ld_writer \ + and not test_extracted_licensing_info_parser \ + and not test_parse_file \ + and not test_package_parser \ + and not test_relationship_parser \ + and not test_graph_parsing_function \ + and not test_license_expression_parser \ + ' + +%: + dh $@ --with python3 --buildsystem=pybuild diff --git a/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb new file mode 100644 index 00000000..30d090a9 --- /dev/null +++ b/meta/recipes-support/python3-spdx-tools/python3-spdx-tools_0.8.3.bb @@ -0,0 +1,46 @@ +# This software is a part of ISAR. +# Copyright (c) Siemens, 2025 +# +# SPDX-License-Identifier: MIT + +inherit dpkg + +FILESEXTRAPATHS:prepend := "${THISDIR}/files:" + +S = "${WORKDIR}/tools-python-${PV}" + +DEPENDS:append:bookworm = " python3-beartype" + +MAINTAINER = "Christoph Steiger " +DPKG_ARCH = "all" +DEBIAN_BUILD_DEPENDS = "dh-python, \ + python3-all, \ + python3-setuptools, \ + python3-beartype, \ + python3-semantic-version, \ + python3-license-expression, \ + python3-pytest , \ + python3-rdflib, \ + python3-uritools, \ + python3-ply, \ + python3-click, \ + python3-xmltodict, \ + python3-yaml, \ + " + +DEBIAN_DEPENDS = "\${python3:Depends}, \${misc:Depends}" +DEB_BUILD_PROFILES += "nocheck" +DEB_BUILD_OPTIONS += "nocheck" + +DESCRIPTION = "SPDX parser and tools." + +SRC_URI = "\ + https://github.com/spdx/tools-python/archive/refs/tags/v0.8.3.tar.gz \ + file://rules \ + " +SRC_URI[sha256sum] = "17cb0140adbaefb58819c9d5d56060dc6a70c673a854fa9bd882ecfa4e062a7f" + +do_prepare_build[cleandirs] += "${S}/debian" +do_prepare_build() { + deb_debianize +}