"Component hash" in SPDX #7064
-
Hi, how can we enable the "component hash" in the SPDX report? I can't find it in the documentation. |
Beta Was this translation helpful? Give feedback.
Answered by
sschuberth
May 30, 2023
Replies: 3 comments 5 replies
-
The NTIA "Component Hash" maps to the SPDX "Package Checksum" which we're not writing out yet (we're only writing out the SPDX "Package Verification Code", but that's a different thing). I'll prepare a PR. |
Beta Was this translation helpful? Give feedback.
2 replies
Answer selected by
dgutson
-
@sschuberth because of #7066 is this enabled now? Should I just update ORT and checksums will start to show up? |
Beta Was this translation helpful? Give feedback.
1 reply
-
@sschuberth any chance this could be also added to the HTML web page too? |
Beta Was this translation helpful? Give feedback.
2 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The NTIA "Component Hash" maps to the SPDX "Package Checksum" which we're not writing out yet (we're only writing out the SPDX "Package Verification Code", but that's a different thing). I'll prepare a PR.