2 commits

Author	SHA1	Message	Date
Tomáš Hozza	aaa6d8ec84	sbom/spdx2/model: support ExtractedLicensingInfo ... Extend the SPDX v2 model to support referencing extracted licensing information, which is either not in the SPDX license list or can't be expressed by the SPDX-compliant license expression. Cover the new functionality by unit tests. Signed-off-by: Tomáš Hozza <thozza@redhat.com>	2025-02-27 13:31:19 +01:00
Tomáš Hozza	0b68f8123b	Add initial SBOM library implementation ... Add implementation of standard-agnostic model for SBOM, and simple SPDX v2.3 model. Also add convenience functions for converting DNF4 package set to the standard-agnostic model and for converting it to SPDX model. Cover the functionality with unit tests. Signed-off-by: Tomáš Hozza <thozza@redhat.com>	2024-09-18 12:26:36 +02:00