ndip007 / spdx-build-tool Goto Github PK

Support a continuous integration (CI) generation of SPDX files by creating a plugins or extensions to build tools. These plugins or extensions will generate valid SPDX documents based on the build file metadata and source files.

Home Page: https://github.com/spdx/

License: Other

Python 100.00%

build-tool build-tool-integration gsoc-2018 spdx

spdx-build-tool's People

Contributors

Watchers

spdx-build-tool's Issues

Initial project setup

Create evaluator module

Integrate the pip and deb build tools

Integrate the yocto and npm build tools

Push initial project setup on github

Trailing Junk in license text

See https://github.com/ndip007/spdx-build-tool/blob/develop/LICENSE#L22 ...
there is some trailing extra junk there.

Make spdx files generation as part of the software build process

Overview

Make the corresponding build tool execute an spdx file as part of the build process, based on the license info gathered.

Deliverable/User story

Should be able to launch a project’s build process and have a full spdx file automatically generated.

Write automated tests for the plugin

Create scanner module

Create downloader module

Combine the generated spdx file with that of the dependencies

Integrate the ms build tool

Create reporter module

Design an algorithm to determine the build tool used by a software/project.

Create downloader module

Create documenter module

Create Analyzer Module

This which should determine the project dependencies from outside
#1

Project/Build-Tool Inspector

Write a python tool that inspect the project/build tool (and the declared dependencies) from the outside, and outputs build-tool-agnostic YAML or JSON for all meta-data declared by the build tool (incl. the license, dependencies etc)