[roll] Roll fuchsia [check-licenses] Manually build SPDX package objects.

The golang spdx library provides a "builder" function for automatically
generating SPDX objects. For package objects, by default it traverses
your filesystem to enumerate all the files that are included in a given
package.

I don't need it to do that in check-licenses, and it seems the built-in
way of skipping this behavior doesn't work. As a result, sometimes in CQ
it attempts to read a bunch of hidden files, some of which are private /
with no read permissions / symbolic links etc etc, and cause the
traversal logic to error out. Flakes in CQ are bad.

For now let's just build the package objects manually all the time.
functionally it is the same thing.

Original-Reviewed-on: https://fuchsia-review.googlesource.com/c/fuchsia/+/780331
Original-Revision: a63f594d49d38a8b86b7612e03cf4dcff5ccdb97
GitOrigin-RevId: 67f2ede3884077039e368fadd0a214f9d958fd8c
Change-Id: Ia9f953bc341e3163e0d083bd3fe0e7f37e299d54
1 file changed
tree: 1bbfca133a8db46404f7d9396f009a7e52e0b7ab
  1. git-hooks/
  2. infra/
  3. third_party/
  4. cts
  5. firmware
  6. flower
  7. jiri.lock
  8. minimal
  9. prebuilts
  10. README.md
  11. stem
  12. test_durations
  13. toolchain
README.md

Integration

This repository contains Fuchsia's Global Integration manifest files.

Making changes

All changes should be made to the internal version of this repository. Our infrastructure automatically updates this version when the internal one changes.

Currently all changes must be made by a Google employee. Non-Google employees wishing to make a change can ask for assistance via the IRC channel #fuchsia on Freenode.

Obtaining the source

First install Jiri.

Next run:

$ jiri init
$ jiri import minimal https://fuchsia.googlesource.com/integration
$ jiri update

Third party

Third party projects should have their own subdirectory in ./third_party.