commit fd7e6517d345d3b8d4af12dae345434d968b83b9
author Wei Li <weiwli@google.com> Fri May 05 10:49:28 2023 -0700
committer Wei Li <weiwli@google.com> Thu May 11 13:58:37 2023 -0700
tree c4061a6308f1a9ff6c3486e88bff651e3efd8681
parent 99d89154f193d79591a552ae1905296e308feb06

Some changes to support SBOM generation for b build unbundled APEXs.

1) Use output file path of installed files in build system since there is no PRODUCT_OUT in Bazel
2) Use CONTAINS to describe the relationship between a APEX and files it contains
3) Generate SBOM of APEXs, which is similar to SBOM of products

Bug: 275472038
Test: CIs
Change-Id: I41622366e5e6ed9dc78cca7bc7bb69a1f8f9bd9f

tools/sbom/sbom_data.py

diff --git a/tools/sbom/sbom_data.py b/tools/sbom/sbom_data.py
index d2ef48d..14c4eb2 100644
--- a/tools/sbom/sbom_data.py
+++ b/tools/sbom/sbom_data.py
@@ -80,6 +80,7 @@
   DESCRIBES = 'DESCRIBES'
   VARIANT_OF = 'VARIANT_OF'
   GENERATED_FROM = 'GENERATED_FROM'
+  CONTAINS = 'CONTAINS'
 
 
 @dataclass