linux.git/scripts/sbom, branch v7.2-rc1

scripts/sbom: add unit tests for SPDX-License-Identifier parsing

2026-05-22T11:14:41+00:00

Verify that SPDX-License-Identifier headers at the top of source files
are parsed correctly.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add unit tests for command parsers

2026-05-22T11:14:41+00:00

Add unit tests to verify that command parsers correctly extract
input files from build commands.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add SPDX build graph

2026-05-22T11:14:41+00:00

Implement the SPDX build graph to describe the relationships
between source files in the source SBOM and output files in
the output SBOM.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add SPDX source graph

2026-05-22T11:14:41+00:00

Implement the SPDX source graph which contains all source files
involved during the build, along with the licensing information
for each file.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add SPDX output graph

2026-05-22T11:14:41+00:00

Implement the SPDX output graph which contains the distributable
build outputs and high level metadata about the build.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: collect file metadata

2026-05-22T11:14:41+00:00

Implement the kernel_file module that collects file metadata,
including license identifier for source files, SHA-256 hash,
Git blob object ID, an estimation of the file type, and
whether files belong to the source, build, or output SBOM.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add shared SPDX elements

2026-05-22T11:14:41+00:00

Implement shared SPDX elements used in all three documents.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add JSON-LD serialization

2026-05-22T11:14:41+00:00

Add infrastructure to serialize an SPDX graph as a JSON-LD
document. NamespaceMaps in the SPDX document are converted
to custom prefixes in the @context field of the JSON-LD output.

The SBOM tool uses NamespaceMaps solely to shorten SPDX IDs,
avoiding repetition of full namespace URIs by using short prefixes.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add SPDX classes

2026-05-22T11:14:41+00:00

Implement Python dataclasses to model the SPDX classes
required within an SPDX document. The class and property
names are consistent with the SPDX 3.0.1 specification.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman

scripts/sbom: add additional dependency sources for cmd graph

2026-05-22T11:14:41+00:00

Add hardcoded dependencies and .incbin directive parsing to
discover dependencies not tracked by .cmd files.

Assisted-by: Cursor:claude-sonnet-4-5
Assisted-by: OpenCode:GLM-4-7
Co-developed-by: Maximilian Huber 
Signed-off-by: Maximilian Huber 
Signed-off-by: Luis Augenstein 
Signed-off-by: Greg Kroah-Hartman