mirror of https://github.com/wolfSSL/wolfTPM.git
fc511714d3
Autotools: replace the inline make sbom recipe with the shared
scripts/sbom.am fragment (declare wolftpm identity, LICENSE, wolfSSL
dependency, and wolftpm/options.h as the feature-macro source). Add GIT
discovery + AC_SUBST for reproducible SOURCE_DATE_EPOCH, and revert the
WOLFTPM_LIBRARY_VERSION_{FIRST,SECOND,THIRD} split that only fed the old
hardcoded --lib path (the fragment discovers the artifact by glob).
CMake: pin the SBOM licence to GPL-3.0-or-later (header-accurate; matches
autotools SBOM_LICENSE_OVERRIDE) and record wolfSSL as a dependency via
--dep-wolfssl, capability-gated on gen-sbom --help so older gen-sbom
versions still produce a valid (dependency-less) SBOM.
Pin the license default to GPL-3.0-or-later to match the source headers
("or (at your option) any later version"), fixing the SBOM licence field.
Add a CI workflow that builds wolfSSL + wolfTPM and asserts SBOM identity,
licence, options capture, reproducibility, and the wolfSSL dependency.
Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com>
|
||
|---|---|---|
| .. | ||
| _resolve-wolfssl.yml | ||
| cmake-build.yml | ||
| codeql.yml | ||
| codespell.yml | ||
| coverity-scan-fixes.yml | ||
| fuzz.yml | ||
| fwtpm-test.yml | ||
| make-test-swtpm.yml | ||
| multi-compiler.yml | ||
| nightly.yml | ||
| pqc-build-matrix.yml | ||
| pqc-examples.yml | ||
| publish-ci-image.yml | ||
| release-checks.yml | ||
| sanitizer.yml | ||
| sbom.yml | ||
| seal-test.yml | ||
| semgrep.yml | ||
| smoke-test.yml | ||
| spdm-test.yml | ||
| win-test.yml | ||
| wolfssl-v4.7.0.patch | ||
| wolfssl-versions-pqc.yml | ||
| zephyr.yml | ||