From ad6e027b08b4d900f5cac616db0ab77cc17ef4c7 Mon Sep 17 00:00:00 2001
From: Ralph Rooding <ralph@ralphrooding.com>
Date: Thu, 12 Mar 2026 21:39:53 +0100
Subject: [PATCH] Add PURL to Zephyr module.yml for SBoM generation (#1344)

Co-authored-by: John Wellbelove <jwellbelove@users.noreply.github.com>
---
 scripts/update_version.py | 25 +++++++++++++++++++++++++
 zephyr/module.yml         |  3 +++
 2 files changed, 28 insertions(+)

diff --git a/scripts/update_version.py b/scripts/update_version.py
index 9d9fbc65..705a07a8 100644
--- a/scripts/update_version.py
+++ b/scripts/update_version.py
@@ -129,6 +129,29 @@ def update_library_properties(filename):
       f.write(line)
       f.write('\n')
 
+#------------------------------------------------------------------------------
+def update_zephyr_module():
+  print('')
+  print('Updating zephyr/module.yml')
+
+  zephyr_module = os.path.join(etl_dir, 'zephyr', 'module.yml')
+
+  with open(zephyr_module, 'r') as f:
+    text = f.read().splitlines()
+
+  search_purl = 'pkg:github/ETLCPP/etl@'
+
+  for i in range(len(text)):
+    if search_purl in text[i]:
+       idx = text[i].find(search_purl)
+       text[i] = text[i][:idx] + search_purl + full_version
+       print(text[i])
+
+  with open(zephyr_module, 'w') as f:
+    for line in text:
+      f.write(line)
+      f.write('\n')
+
 #------------------------------------------------------------------------------
 def update_versions():
   print('')
@@ -149,6 +172,8 @@ def update_versions():
 
   update_library_properties(os.path.join(etl_dir,     'library.properties'))
 
+  update_zephyr_module()
+
 #------------------------------------------------------------------------------
 if __name__ == "__main__":
   update_versions()
diff --git a/zephyr/module.yml b/zephyr/module.yml
index b292d6a1..be27ae79 100644
--- a/zephyr/module.yml
+++ b/zephyr/module.yml
@@ -2,3 +2,6 @@ name: etl
 build:
   cmake: zephyr
   kconfig: zephyr/Kconfig
+security:
+  external-references:
+    - pkg:github/ETLCPP/etl@20.46.2