Opened on 02/27/22 at 16:41:55
Last modified on 02/28/22 at 20:34:52
#4624 new enhancement
Integrate Software License Bill of Materials (BOM) using SPDX Tooling
Reported by: | Joel Sherrill | Owned by: | |
---|---|---|---|
Priority: | normal | Milestone: | Indefinite |
Component: | tool | Version: | |
Severity: | normal | Keywords: | SoC, ecosystem, small, large |
Cc: | Blocked By: | ||
Blocking: |
Description (last modified by Gedare Bloom)
The purpose of this project is to identify and integrate tooling that supports SPDX license annotation (see https://spdx.org). Understanding the purpose of SPDX and why its tooling is used is important background for this project. This project will:
- Identify SPDX tooling and ideas that the RTEMS Project could benefit from
- Evaluate use of that tooling
- What types of reports? Consistency checks?
- Evaluate if there are checks for git pre-commit.
- Perhaps evaluate tooling to identify files without SPDX annotation and the licenses used. This will help us run down the remaining files without annotation.
All tooling should be open source.
Possible mentors: Joel Sherrill, Gedare Bloom, Sebastian Huber, Chris Johns
Languages: Preferably Python for any third party tools from SPDX. Python for RTEMS specific integration.
Difficulty: Medium
Change History (1)
comment:1 Changed on 02/28/22 at 20:34:52 by Gedare Bloom
Description: | modified (diff) |
---|
Note: See
TracTickets for help on using
tickets.