fix(sbom): add note about Espressif modifications

Since our mbedtls code is not a pure upstream version, let's add a note
about this in the SBOM manifest description, which will be included in
the generated SPDX file. We used the same approach e.g. for freertos.

Signed-off-by: Frantisek Hrbata <frantisek.hrbata@espressif.com>
This commit is contained in:
Frantisek Hrbata 2023-10-23 08:36:56 +02:00 committed by Mahavir Jain
parent afbc5fad1b
commit 2b8e772fc1
No known key found for this signature in database
GPG Key ID: 99324EF4A00734E0

View File

@ -1,5 +1,5 @@
version: 2.28.5 version: 2.28.7
cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:* cpe: cpe:2.3:a:arm:mbed_tls:{}:*:*:*:*:*:*:*
supplier: 'Organization: Espressif Systems (Shanghai) CO LTD' supplier: 'Organization: Espressif Systems (Shanghai) CO LTD'
originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>' originator: 'Organization: Trusted Firmware <mbed-tls-security@lists.trustedfirmware.org>'
description: An open source, portable, easy to use, readable and flexible SSL library. description: An open source, portable, easy to use, readable and flexible SSL library with additional features and patches from Espressif.