Description of problem: When I run "rpm2swidtag --repo", the newly-created repodata/*-swidtags.xml.gz file is added to the list of artifacts in the existing repodata/repomd.xml file. Unfortunately, if the repo has been hard-linked to another location, this update-in-place behaviour results in the repomd.xml for both locations of the repomd.xml being updated. It is natural practice to manage multiple versions of a repo via hardlink farms. It would be more convenient to be able to add SWID tags to one copy of a hardlinked repo tree without disturbing the other, by having rpm2swidtag --repo write the new repomd.xml to a new inode instead of updating the existing one in-place. Version-Release number of selected component (if applicable): swid-tools-0.8.1-1 How reproducible: 100%
Temporary repomd.xml + rename was implemented upstream: https://github.com/swidtags/rpm2swidtag/commit/403eef94efbbc2ca785f33adeb2f224ac850e919
swid-tools-0.8.2-1.fc30 has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2019-2c96e4701e
swid-tools-0.8.2-1.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2019-2c96e4701e
swid-tools-0.8.2-1.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report.