Commit graph

5 commits

Author SHA1 Message Date
Miro Hrončok
bc877eff40 %python_wheel_inject_sbom: Hardcode the purl of this tool instead of constructing it at runtime
That way, when  python-rpm-macros from Fedora is installed on other distro,
the purl will still say pkg:rpm/fedora/python-rpm-macros,
or the other way around.
2026-03-17 16:41:37 +01:00
Miro Hrončok
f16e645fa1 %python_wheel_inject_sbom: Rename the SBOM file to limit the possibility of clashes 2026-03-10 11:44:10 +01:00
Miro Hrončok
59ed845841 %python_wheel_inject_sbom: Add more metadata to the SBOM 2026-03-10 11:43:35 +01:00
Miro Hrončok
47de23b3c0 %python_wheel_inject_sbom: Don't accidentally alter nested .dist-infos
In python-setuptools-wheel, the macro was confused by
setuptools/_vendor/autocommand-2.2.2.dist-info/RECORD (or other vendored RECORDs)
2025-08-29 13:46:23 +02:00
Miro Hrončok
7d4cb5437d Introduce %python_wheel_inject_sbom
See https://discuss.python.org/t/encoding-origin-in-wheel-and-dist-info-metadata-for-downstream-security-backports/97436
2025-08-27 16:13:40 +02:00