Summary of the new document or enhancement
Description of what changed
All 7.2 packages should have a _manifest\spdx_2.2\manifest.spdx.json in them which has a sha1 and sha256 hash of all files. This can be used to verify the integrity of a package.
the spec for the format is here:
https://spdx.github.io/spdx-spec/introduction/
Summary of the new document or enhancement
List of articles that need to be updated:
New articles that need to be created:
Link(s) to related code PR(s) in the PowerShell/PowerShell repo:
Add Software Bill of Materials to the main packages PowerShell/PowerShell#16202
Link(s) to related issue(s) in the PowerShell/PowerShell repo:
Description of what changed
All 7.2 packages should have a
_manifest\spdx_2.2\manifest.spdx.jsonin them which has a sha1 and sha256 hash of all files. This can be used to verify the integrity of a package.the spec for the format is here:
https://spdx.github.io/spdx-spec/introduction/