mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
e8c54ffb3d
Some packages do not have a http/https download URL for a source tarball, but are acquired over a version control system like git. If so, add externalReferences of type "vcs" for such URLs. As most git repositories use a https:// transport that may not indicated the repository type, add a "comment" due to the lack of a better mechanism in CycloneDX. While the hashes are calculated over a tarball created locally, it still may be useful, so add them for "vcs" externalReferences as well. Signed-off-by: Martin Willi <martin@strongswan.org> Acked-By: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Arnout Vandecappelle <arnout@rnout.be>