Skip to content

feat: add sbom Makefile target #85

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
MarkAtwood wants to merge 6 commits into
base: master
Choose a base branch
from
Open

feat: add sbom Makefile target #85

Changes from 1 commit
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
2df14cf
feat: add sbom target to Makefile
MarkAtwood Jun 23, 2026
e0e1e8d
docs: add SBOM/EU CRA Compliance section to README and build docs
MarkAtwood Jun 24, 2026
352caaa
fix: single-line SBOM_VERSION shell for make 3.81
MarkAtwood Jul 6, 2026
cfcc5da
fix: escape # in awk so make 3.81 parses shell
MarkAtwood Jul 6, 2026
409ed3f
fix: address SBOM review feedback
MarkAtwood Jul 10, 2026
d23ddd4
fix: sbom install targets, real options file
MarkAtwood Jul 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions Makefile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -547,6 +547,58 @@ doc: doc-html $(BUILD_TOP)/doc/pdf/refman.pdf

doc-clean: doc-html-clean doc-pdf-clean

# SBOM generation (CRA compliance)
SBOM_VERSION := $(shell awk '/^#define WOLFSENTRY_VERSION_MAJOR/{maj=$$3} /^#define WOLFSENTRY_VERSION_MINOR/{min=$$3} /^#define WOLFSENTRY_VERSION_TINY/{tiny=$$3} END{print maj"."min"."tiny}' \
'$(SRC_TOP)/wolfsentry/wolfsentry.h' 2>/dev/null)
SBOM_CDX = wolfsentry-$(SBOM_VERSION).cdx.json
SBOM_SPDX = wolfsentry-$(SBOM_VERSION).spdx.json
SBOM_SPDX_TV = wolfsentry-$(SBOM_VERSION).spdx
Comment thread
MarkAtwood marked this conversation as resolved.
Outdated

.PHONY: sbom

sbom:
$(Q)if [ -z "$(SBOM_VERSION)" ] || [ "$(SBOM_VERSION)" = ".." ]; then \
echo "ERROR: could not extract version from wolfsentry/wolfsentry.h" 1>&2; \
exit 1; \
fi
Comment thread
MarkAtwood marked this conversation as resolved.
Outdated
$(Q)if [ -n "$(GEN_SBOM)" ]; then \
_gen_sbom="$(GEN_SBOM)"; \
elif [ -n "$(WOLFSSL_DIR)" ]; then \
_gen_sbom="$(WOLFSSL_DIR)/scripts/gen-sbom"; \
else \
echo "ERROR: set WOLFSSL_DIR (path to wolfssl repo) or GEN_SBOM (path to gen-sbom script)" 1>&2; \
exit 1; \
fi; \
if [ ! -f "$$_gen_sbom" ]; then \
echo "ERROR: gen-sbom not found: $$_gen_sbom" 1>&2; \
exit 1; \
fi; \
if ! command -v python3 >/dev/null 2>&1; then \
echo "ERROR: python3 not found in PATH" 1>&2; \
exit 1; \
fi; \
_defines_h=$$(mktemp "$${TMPDIR:-/tmp}/wolfsentry-defines.XXXXXX"); \
trap 'rm -f "$$_defines_h"' EXIT; \
if ! $(CC) -dM -E -I'$(SRC_TOP)' -x c /dev/null >"$$_defines_h" 2>/dev/null; then \
Comment thread
MarkAtwood marked this conversation as resolved.
Outdated
echo "ERROR: $(CC) -dM -E failed" 1>&2; \
exit 1; \
fi; \
Comment thread
MarkAtwood marked this conversation as resolved.
Outdated
_srcs=""; \
for _f in $(SRCS); do _srcs="$$_srcs $(SRC_TOP)/src/$$_f"; done; \
python3 "$$_gen_sbom" \
--name wolfsentry \
Comment thread
MarkAtwood marked this conversation as resolved.
--version "$(SBOM_VERSION)" \
--supplier "wolfSSL Inc." \
--license-file "$(SRC_TOP)/LICENSING" \
--options-h "$$_defines_h" \
--srcs $$_srcs \
--cdx-out "$(BUILD_TOP)/$(SBOM_CDX)" \
--spdx-out "$(BUILD_TOP)/$(SBOM_SPDX)"
Comment thread
MarkAtwood marked this conversation as resolved.
ifndef VERY_QUIET
$(Q)echo "SBOM written: $(BUILD_TOP)/$(SBOM_CDX)"
$(Q)echo " $(BUILD_TOP)/$(SBOM_SPDX)"
endif

.PHONY: clean
clean:
$(Q)rm $(CLEAN_RM_ARGS)
Expand Down
Loading