Releases: TNG/KernelSbom
Releases · TNG/KernelSbom
Release list
v0.3.0-alpha
What's Changed
- Strace Kernel Build Analysis in #96
- Integration Test (Reproducibility) in #97
- Refactoring Spdx Graph Generation in #102
- Fix printf Parsing and Remove Working Directory Estimation in #104
- Expand Custom Context in #106
- Reproducibility By Default in #107
- Cleanup and Documentation #98, #105, #108, #111
Full Changelog: v0.2.0-alpha...v0.3.0-alpha
v0.2.0-alpha
What's Changed
- Improved Error Handling #93
- Support for Arm64 Architecture #94
- Expand Properties not Expandable with Standard JSON-LD Tools #92
Full Changelog: https://github.com/TNG/KernelSbom/commits/v0.2.0-alpha
v0.1.0-alpha
KernelSbom v0.1.0-alpha - First Pre-release
Introducing the initial alpha release of KernelSbom - a tool for generating SPDX documents from Linux kernel builds!
Key Features
- Generates internal dependency graph (Cmd Graph) from kernel
.cmdfiles for all files involved in a given kernel build- Extracts dependencies by parsing
.cmdfiles and.incbinstatements in.Sassembly files
- Extracts dependencies by parsing
- Produces SPDX documents for source, build, and output files
- Parses SPDX license headers from source files and copyright text from top level COPYING file in the source tree
- Computes file hashes and classifies primary purposes for all files
- Captures build environment variables used in the
makekernel build process
- Supports both in-tree and out-of-tree kernel builds
- Supports kernel modules as root artifacts
- Supports Rust-based kernel builds
- Supports x86 architecture
- Provides analysis scripts for Cmd Graph visualization and validation
- Cmd graph completeness guarantees for x86 tinyconfig
- Provides GitHub Actions workflow for testing on various build configurations and kernel versions
Missing Features
- Support for architectures other than x86
- Cmd Graph completeness guarantees or estimates for configurations other than x86 tinyconfig
Full Changelog: https://github.com/TNG/KernelSbom/commits/v0.1.0-alpha
Note: This is an alpha release — we welcome testing and feedback!