https://devzone.nordicsemi.com/f/nordic-q-a/129246/west-spdx-includes-gitlab-token-in-ci-generated-spdx-fileRunning west spdx using NCS 3.4.0 / Zephyr 4.4.0), the generated zephyr.spdx file (generated in CI) for our application contains a Gitlab token in PackageDownloadLocation. ##### Package: drivers-sources PackageName: drivers-sources SPDXID: SPDXRef-driversen-USTelligent Community 13Thu, 24 Sep 2026 11:10:42 GMThttps://devzone.nordicsemi.com/thread/571540?ContentTypeID=1Thu, 24 Sep 2026 11:10:42 GMT137ad170-7792-4731-bb38-c0d22fbe4515:c2399534-7689-41c3-a367-0738533b33d4H&#229;kon Alseth<p>Hi,</p> <p>&nbsp;</p> <p>As from the discord thread, I see that you have been in contact with the appropriate code owners.</p> [quote user=""]SPDX 3.0 coming with the next NCS/Zephyr release?[/quote] <p>SPDX 3.0 support is in ncs main at this time:</p> <p><a href="https://github.com/nrfconnect/sdk-zephyr/tree/main/scripts/pylib/zspdx/serializers/spdx3">https://github.com/nrfconnect/sdk-zephyr/tree/main/scripts/pylib/zspdx/serializers/spdx3</a>&nbsp;</p> <p></p> <p>However, it is not easy to state if this will help for this specific scenario. Were you able to work around this issue?</p> <p>&nbsp;</p> <p>Kind regards,</p> <p>Håkon</p><div style="clear:both;"></div>https://devzone.nordicsemi.com/thread/571457?ContentTypeID=1Wed, 23 Sep 2026 05:41:40 GMT137ad170-7792-4731-bb38-c0d22fbe4515:163cb094-9f08-4a2c-8530-29f61a92d04fmabe<p>Related discussion from me in Zephyr Discord:&nbsp;<a href="https://discord.com/channels/720317445772017664/732990764337856574/1551897359590359052">discord.com/.../1551897359590359052</a></p><div style="clear:both;"></div>