NRL-1928 make reference less generic for asdf sbom entries

anjalitrace2-nhs · anjalitrace2-nhs · commit 5389e6ce5ba9 · 2026-02-10T09:19:41.000Z
diff --git a/scripts/sbom_from_asdf.py b/scripts/sbom_from_asdf.py
@@ -52,7 +52,7 @@ def generate_asdf_sbom(output_file="sbom-asdf.spdx.json"):
                     {
                         "referenceCategory": "PACKAGE-MANAGER",
                         "referenceType": "purl",
-                        "referenceLocator": f"pkg:generic/{tool['name']}@{tool['version']}",
+                        "referenceLocator": f"pkg:asdf/{tool['name']}@{tool['version']}",
                     }
                 ],
             }

Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,7 @@ def generate_asdf_sbom(output_file="sbom-asdf.spdx.json"):`
`52`	`52`	`{`
`53`	`53`	`"referenceCategory": "PACKAGE-MANAGER",`
`54`	`54`	`"referenceType": "purl",`
`55`		`- "referenceLocator": f"pkg:generic/{tool['name']}@{tool['version']}",`
	`55`	`+ "referenceLocator": f"pkg:asdf/{tool['name']}@{tool['version']}",`
`56`	`56`	`}`
`57`	`57`	`],`
`58`	`58`	`}`