On Sat, 2023-12-23 at 02:47 -0800, fabian.hanke via lists.yoctoproject.org
wrote:
> we must provide a SBOM for our Yocto based product which will then be
> used for (internal) CVE scanning by the security department.
> Generating the base document in cycloneDX format is fairly easy
> (thanks to th
Hello,
I don't know if it will help, in our company, we modified cve-check.bbclass
so it is linked to our JIRA.
At first build, it creates a ticket for every active CVE.
We analyse CVEs on JIRA and close tickets that are not relevant for our
product.
At next builds, modified cve-check.bbclass chec
Hello,
I'm running a project that uses yocto to produce a version of linux.
The image must contain a program developed with eclipse CDT which uses the one
contained in the SDK as a toolchain and I have added a recipes called
isabusrun.bb which includes this application.
Under these conditions the