fix(sbom): add note about Espressif modifications

Since our mbedtls code is not a pure upstream version, let's add a note
about this in the SBOM manifest description, which will be included in
the generated SPDX file. We used the same approach e.g. for freertos.

Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
This commit is contained in:
Frantisek Hrbata 2023-10-23 08:36:56 +02:00
parent dabd8dbb36
commit 29ca493a1d

View File

@ -2,4 +2,4 @@ version: 2.28.5
cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:* cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD' supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>' originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
description: An open source, portable, easy to use, readable and flexible SSL library. description: An open source, portable, easy to use, readable and flexible SSL library with additional features and patches from Espressif.