Skip to content

Enable spdx SBoM creation and cve report by default #21

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
t-mon wants to merge 1 commit into
base: kirkstone
Choose a base branch
from
Open

Enable spdx SBoM creation and cve report by default #21

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions conf/local.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -270,6 +270,19 @@ DISTRO_FEATURES_BACKFILL_CONSIDERED += " sysvinit pulseaudio bluez5 gobject-intr
VIRTUAL-RUNTIME_init_manager = "systemd"
VIRTUAL-RUNTIME_update-alternatives = ""

# Enable SPDX SBOM generation
INHERIT += "create-spdx"

# Optional: nicer JSON formatting
SPDX_PRETTY = "1"

# Optional: include source descriptions / archives (useful for compliance)
SPDX_INCLUDE_SOURCES = "1"
SPDX_ARCHIVE_SOURCES = "1"

# Enable security report generation at build time
INHERIT += "cve-check"

# /var/log should be persistent
VOLATILE_LOG_DIR = "no"

Expand Down