mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-08-20 03:23:31 +02:00
Sameeh Jubran
4ec80d309a
Add tooling to produce Software Bills of Materials and build provenance for wolfSSL, supporting EU Cyber Resilience Act (CRA) obligations. SBOM generation: - New `make sbom` target producing SPDX 2.3 output with NTIA minimum elements, urn:uuid document namespaces, and SPDX LicenseRef compliance. - Reproducible library discovery across autotools and CMake builds, with liboqs recorded as a linked artefact. - Standalone `scripts/gen-sbom` for embedded / RTOS / custom-builder flows that do not use the main build system, plus --srcs-file, --no-artifact-hash, and hash-source options. Build provenance (OmniBOR / bomsh): - End-to-end bomsh tracing of the built binaries with ArtifactID insertion, snapshotting the traced library before libtool relink and hashing the bomsh-traced binary. - `scripts/bomsh_verify.py` to validate provenance against the traced gitoid. Security advisories: - `scripts/gen-advisory` generating CSAF 2.0 and CycloneDX VEX, with a `make` target, VEX overlay schema/example, and CWE name data. Docs, tests, and CI: - doc/SBOM.md and doc/CRA.md, plus README/INSTALL updates. - Unit and regression tests for gen-sbom and gen-advisory. - New sbom.yml and advisory.yml workflows: SPDX validation via pyspdxtools, CSAF validation, bomsh provenance verification, SBOM artifact archiving, macOS coverage, and actions pinned to SHAs. Signed-off-by: Sameeh Jubran <sameeh@wolfssl.com>
28 lines
647 B
Plaintext
28 lines
647 B
Plaintext
# vim:ft=automake
|
|
# included from Top Level Makefile.am
|
|
# All paths should be given relative to the root
|
|
|
|
dist_doc_DATA+= doc/README.txt \
|
|
doc/QUIC.md \
|
|
doc/dilithium-to-mldsa-migration.md \
|
|
doc/SBOM.md \
|
|
doc/CRA.md
|
|
|
|
|
|
dox-pdf:
|
|
echo "Generating PDF"
|
|
cd doc && ./generate_documentation.sh -install -pdf || (echo "HTML generation failed $$?"; exit 1)
|
|
|
|
dox-html:
|
|
echo "Generating HTML"
|
|
cd doc && ./generate_documentation.sh -install -html || (echo "HTML generation failed $$?"; exit 1)
|
|
|
|
dox: dox-html dox-pdf
|
|
|
|
clean-local:
|
|
-rm -rf doc/build/
|
|
-rm -rf doc/html/
|
|
-rm -f doc/refman.pdf
|
|
-rm -f doc/doxygen_warnings
|
|
-rm -rf $(BOMSH_OMNIBORDIR)
|