package/arm-trusted-firmware: add ARM_TRUSTED_FIRMWARE_CPE_ID_*

Trusted-Firmware has been using a number of CPE identifiers in the past
but especially after v2.4, the correct identifier would be similar
to cpe:2.3:o:arm:trusted_firmware-a:2.12:rc0:*:*:-:*:*:*

  https://nvd.nist.gov/products/cpe/detail/65DEC230-1CD5-40DB-903A-22537D1E44FE

Add the relevant CPE fields to the trusted-firmware package.

Signed-off-by: Heiko Stuebner <heiko.stuebner@cherry.de>
Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>
This commit is contained in:
Heiko Stuebner
2026-03-26 11:10:33 +01:00
committed by Arnout Vandecappelle
parent 58b9eb270e
commit 53bb7eafb2

View File

@@ -5,6 +5,10 @@
################################################################################
ARM_TRUSTED_FIRMWARE_VERSION = $(call qstrip,$(BR2_TARGET_ARM_TRUSTED_FIRMWARE_VERSION))
ARM_TRUSTED_FIRMWARE_CPE_ID_PREFIX = cpe:2.3:o
ARM_TRUSTED_FIRMWARE_CPE_ID_VENDOR = arm
ARM_TRUSTED_FIRMWARE_CPE_ID_PRODUCT = trusted_firmware-a
ARM_TRUSTED_FIRMWARE_CPE_ID_VERSION = $(subst v,,$(subst lts-,,$(ARM_TRUSTED_FIRMWARE_VERSION)))
ifeq ($(BR2_TARGET_ARM_TRUSTED_FIRMWARE_CUSTOM_TARBALL),y)
# Handle custom ATF tarballs as specified by the configuration