Merge pull request #61 from jasinner/rpm-modules

Add Rpm Module Examples

Author: mprpic

.github/workflows/test.yml

@@ -18,8 +18,9 @@ jobs:
     - name: Run all envs
       uses: fedora-python/tox-github-action@main
       with:
-        # tox_env: ${{ matrix.tox_env }}
         tox_env: py313
+        # Add krb5-devel to the list of packages to install
+        dnf_install: krb5-devel
     strategy:
       matrix:
         tox_env: [black, ruff, spdx-schema, cdx-schema]

README.md

@@ -7,12 +7,14 @@ A set of documents detailing Red Hat's publishing of security data.
 To run a locally served docs site, run:
 
 ```
-python3 -m venv venv
+python3 -m venv --system-site-packages venv
 source venv/bin/activate
 pip install -r requirements/docs-requirements.txt
 mkdocs serve
 ```
 
+We use the `system-site-packages` flag to allow koji to find the python3-rpm package installed via DNF.
+
 If you're running on MacOS and experience issues with the `cairo` dependency, try adding the following:
 
 ```

requirements/dev-requirements.in

@@ -2,3 +2,4 @@ black
 check-jsonschema
 packageurl-python
 ruff
+koji

requirements/dev-requirements.txt

@@ -142,6 +142,41 @@ click==8.2.1 \
     # via
     #   black
     #   check-jsonschema
+decorator==5.2.1 \
+    --hash=sha256:65f266143752f734b0a7cc83c46f4618af75b8c5911b00ccb61d0ac9b6da0360 \
+    --hash=sha256:d316bb415a2d9e2d2b3abcc4084c6502fc09240e292cd76a76afc106a1c8e04a
+    # via gssapi
+defusedxml==0.7.1 \
+    --hash=sha256:1bb3032db185915b62d7c6209c5a8792be6a32ab2fedacc84e01b52c51aa3e69 \
+    --hash=sha256:a352e7e428770286cc899e2542b6cdaedb2b4953ff269a210103ec58f6198a61
+    # via koji
+gssapi==1.9.0 \
+    --hash=sha256:060b58b455d29ab8aca74770e667dca746264bee660ac5b6a7a17476edc2c0b8 \
+    --hash=sha256:10134db0cf01bd7d162acb445762dbcc58b5c772a613e17c46cf8ad956c4dfec \
+    --hash=sha256:11c9fe066edb0fa0785697eb0cecf2719c7ad1d9f2bf27be57b647a617bcfaa5 \
+    --hash=sha256:11e9b92cef11da547fc8c210fa720528fd854038504103c1b15ae2a89dce5fcd \
+    --hash=sha256:14a1ae12fdf1e4c8889206195ba1843de09fe82587fa113112887cd5894587c6 \
+    --hash=sha256:1a5786bd9fcf435bd0c87dc95ae99ad68cefcc2bcc80c71fef4cb0ccdfb40f1e \
+    --hash=sha256:261e00ac426d840055ddb2199f4989db7e3ce70fa18b1538f53e392b4823e8f1 \
+    --hash=sha256:2a9c745255e3a810c3e8072e267b7b302de0705f8e9a0f2c5abc92fe12b9475e \
+    --hash=sha256:2bddd1cc0c9859c5e0fd96d4d88eb67bd498fdbba45b14cdccfe10bfd329479f \
+    --hash=sha256:59e1a1a9a6c5dc430dc6edfcf497f5ca00cf417015f781c9fac2e85652cd738f \
+    --hash=sha256:5b2a3c0a9beb895942d4b8e31f515e52c17026e55aeaa81ee0df9bbfdac76098 \
+    --hash=sha256:67d9be5e34403e47fb5749d5a1ad4e5a85b568e6a9add1695edb4a5b879f7560 \
+    --hash=sha256:6c5f8a549abd187687440ec0b72e5b679d043d620442b3637d31aa2766b27cbe \
+    --hash=sha256:a2e43f50450e81fe855888c53df70cdd385ada979db79463b38031710a12acd9 \
+    --hash=sha256:a81f30cde21031e7b1f8194a3eea7285e39e551265e7744edafd06eadc1c95bc \
+    --hash=sha256:b66a98827fbd2864bf8993677a039d7ba4a127ca0d2d9ed73e0ef4f1baa7fd7f \
+    --hash=sha256:b74031c70864d04864b7406c818f41be0c1637906fb9654b06823bcc79f151dc \
+    --hash=sha256:c0e378d62b2fc352ca0046030cda5911d808a965200f612fdd1d74501b83e98f \
+    --hash=sha256:c99959a9dd62358e370482f1691e936cb09adf9a69e3e10d4f6a097240e9fd28 \
+    --hash=sha256:cbc93fdadd5aab9bae594538b2128044b8c5cdd1424fe015a465d8a8a587411a \
+    --hash=sha256:cea344246935b5337e6f8a69bb6cc45619ab3a8d74a29fcb0a39fd1e5843c89c \
+    --hash=sha256:dfc1b4c0bfe9f539537601c9f187edc320daf488f694e50d02d0c1eb37416962 \
+    --hash=sha256:e28c7d45da68b7e36ed3fb3326744bfe39649f16e8eecd7b003b082206039c76 \
+    --hash=sha256:f2f3a46784d8127cc7ef10d3367dedcbe82899ea296710378ccc9b7cefe96f4c \
+    --hash=sha256:f468fac8f3f5fca8f4d1ca19e3cd4d2e10bd91074e7285464b22715d13548afe
+    # via requests-gssapi
 idna==3.10 \
     --hash=sha256:12f65c9b470abda6dc35cf8e63cc574b1c52b11df2c86030af0ac09b01b13ea9 \
     --hash=sha256:946d195a0d259cbba61165e88e65941f16e9b36ea6ddb97f00452bae8b1287d3
@@ -154,6 +189,11 @@ jsonschema-specifications==2025.4.1 \
     --hash=sha256:4653bffbd6584f7de83a67e0d620ef16900b390ddc7939d56684d6c81e33f1af \
     --hash=sha256:630159c9f4dbea161a6a2205c3011cc4f18ff381b189fff48bb39b9bf26ae608
     # via jsonschema
+koji==1.35.3 \
+    --hash=sha256:7c3c0a18a2efe7d2370103829ca87843e900e59d714555c88fb6e76c9c45d224 \
+    --hash=sha256:a72f4cad73ade373e34fd96ef9017a0f01920ad22b6ee674705d6b524a59ada4 \
+    --hash=sha256:c29d92f1ace7c4f72c5299e31eb8cf4321f4ac5e675c47806b9545fee9cb6deb
+    # via -r dev-requirements.in
 mypy-extensions==1.1.0 \
     --hash=sha256:1be4cccdb0f2482337c4743e60421de3a356cd97508abadd57d47403e94f5505 \
     --hash=sha256:52e68efc3284861e772bbcd66823fde5ae21fd2fdb51c62a211403730b916558
@@ -174,6 +214,10 @@ platformdirs==4.3.8 \
     --hash=sha256:3d512d96e16bcb959a814c9f348431070822a6496326a4be0911c40b5a74c2bc \
     --hash=sha256:ff7059bb7eb1179e2685604f4aaf157cfd9535242bd23742eadc3c13542139b4
     # via black
+python-dateutil==2.9.0.post0 \
+    --hash=sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3 \
+    --hash=sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427
+    # via koji
 referencing==0.36.2 \
     --hash=sha256:df2e89862cd09deabbdba16944cc3f10feb6b3e6f18e902f7cc25609a34775aa \
     --hash=sha256:e8699adbbf8b5c7de96d8ffa0eb5c158b3beafce084968e2ea8bb08c6794dcd0
@@ -275,7 +319,14 @@ regress==2025.5.1 \
 requests==2.32.3 \
     --hash=sha256:55365417734eb18255590a9ff9eb97e9e1da868d4ccd6402399eaf68af20a760 \
     --hash=sha256:70761cfe03c773ceb22aa2f671b4757976145175cdfca038c02654d061d6dcc6
-    # via check-jsonschema
+    # via
+    #   check-jsonschema
+    #   koji
+    #   requests-gssapi
+requests-gssapi==1.3.0 \
+    --hash=sha256:4d52bf8c2aa2a829130efcca85c14943fdd0aa75455aab985b2b8726159c20ca \
+    --hash=sha256:f36303cd989c54d54630c30f1ef73d7e23acdede2285c941631192e51b4da418
+    # via koji
 rpds-py==0.25.1 \
     --hash=sha256:0317177b1e8691ab5879f4f33f4b6dc55ad3b344399e23df2e499de7b10a548d \
     --hash=sha256:036ded36bedb727beeabc16dc1dad7cb154b3fa444e936a03b67a86dc6a5066e \
@@ -469,6 +520,12 @@ ruff==0.11.12 \
     --hash=sha256:f5a07f49767c4be4772d161bfc049c1f242db0cfe1bd976e0f0886732a4765d6 \
     --hash=sha256:f97fdbc2549f456c65b3b0048560d44ddd540db1f27c778a938371424b49fe4a
     # via -r dev-requirements.in
+six==1.17.0 \
+    --hash=sha256:4721f391ed90541fddacab5acf947aa0d3dc7d27b2e1e8eda2be8970586c3274 \
+    --hash=sha256:ff70335d468e7eb6ec65b95b99d3a2836546063f63acc5171de367e834932a81
+    # via
+    #   koji
+    #   python-dateutil
 urllib3==2.4.0 \
     --hash=sha256:414bc6535b787febd7567804cc015fee39daab8ad86268f1310a9250697de466 \
     --hash=sha256:4e16665048960a0900c702d4a66415956a584919c03361cac9f1df5c5dd7e813