adelton/swid

Description

Tools for producing and manipulating Software Identification (SWID) Tags.

Note that rpm2swidtag is packaged as swid-tools in Fedora, with dnf-plugin-swidtags subpackage.

### rpm2swidtag bash
### rpm2swidtag bash | swidq -p - -i
### rpm2swidtag --output-dir /usr/lib/swidtag --tag-creator example.com -a
### ln -s /usr/lib/swidtag/example.com /etc/swid/swidtags.d/generated
swidq -n bash -l

### rpm2swidtag [ options ] --repo /path/to/local/yum/dnf/repo
### # and with DNF rpm2swidtag plugin enabled, the SWID tag from the repository metadata will be placed under /usr/lib/swidtag/*/

swid_generator swid --full --pretty --package bash

package-cve-download-xml                      # will store data in dbs/ subdirectory
package-cve-lookup <( swid_generator swid --package bzip2 ) dbs

swidval -a /usr/lib/swidtag/fedoraproject.org/org.fedoraproject.Fedora-28-x86_64.swidtag

Installation Instructions

Built from

• rpm2swidtag (only on Fedoras as it requires Python 3)
• swid_generator .spec repo
• python2-LibScanner-cli / LibScanner .spec repo
• swidval-binary .spec repo
• distro-swidtag

To install the distro swidtag, use package name appropriate for your system:

yum install -y rhel-swidtag
# dnf install -y fedora-swidtag

Note that Fedora 29+ already ships distribution SWID tag in /usr/lib/swidtag/fedoraproject.org/org.fedoraproject.Fedora-<version>.swidtag.

To install python2-LibScanner-cli on RHEL 7, enable EPEL, for example with

yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm

Active Releases

The following unofficial repositories are provided as-is by owner of this project. Contact the owner directly for bugs or issues (IE: not bugzilla).

Release	Architectures	Repo Download
EPEL 7	x86_64 (1014)*	EPEL 7 (393 downloads)
Fedora 41	i386 (53)*, x86_64 (46)*	Fedora 41 (48 downloads)
Fedora 42	i386 (27)*, x86_64 (31)*	Fedora 42 (33 downloads)
Fedora 43	i386 (0)*, x86_64 (0)*	Fedora 43 (16 downloads)
Fedora rawhide	i386 (730)*, x86_64 (911)*	Fedora rawhide (401 downloads)

* Total number of downloaded packages.