SPDX validation issue


Michael Opdenacker
 

Hi Joshua

I used the create-spdx class a few weeks ago to generate an IMAGE-MACHINE.spdx.json file in tmp/deploy/images/MACHINE/

I tried to validate this SPDX file using the online tool on https://tools.spdx.org/app/validate/, but I get this warning (or error?):

The following warning(s) were raised: [Document must have at least one relationship of type DOCUMENT_DESCRIBES]

Is there anything missing in the document generated by the class?

Thanks in advance
Michael.

--
Michael Opdenacker, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com


Joshua Watt
 

Ya, it's very possible. It's been a while since I tried the validation tool, but it used to complain about all our external document references and "reversed" relationships (even though the spec allows it). Because of that, it's possible there are other problems, since validation was failing in those first


On Wed, Nov 23, 2022, 10:21 AM Michael Opdenacker <michael.opdenacker@...> wrote:
Hi Joshua

I used the create-spdx class a few weeks ago to generate an
IMAGE-MACHINE.spdx.json file in tmp/deploy/images/MACHINE/

I tried to validate this SPDX file using the online tool on
https://tools.spdx.org/app/validate/, but I get this warning (or error?):

The following warning(s) were raised: [Document must have at least one relationship of type DOCUMENT_DESCRIBES]

Is there anything missing in the document generated by the class?

Thanks in advance
Michael.

--
Michael Opdenacker, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com