patch: generate SBOM & CVE check

balena-os · Sep 16, 2024 · b2878dc · b2878dc
1 parent 743309f
commit b2878dc
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/meta-balena-common/conf/distro/include/balena-os.inc b/meta-balena-common/conf/distro/include/balena-os.inc
@@ -150,3 +150,9 @@ BALENA_NONENC_BOOT_MOUNT ?= "/mnt/${@'${BALENA_NONENC_BOOT_LABEL}'.replace('bale
 # This is the docker API version for v20.10
 # balena version --format '{{.Server.APIVersion}}'
 BALENA_API_VERSION ?= "1.41"
+
+# Generate SBOM https://docs.yoctoproject.org/dev/ref-manual/classes.html#ref-classes-create-spdx
+INHERIT += "create-spdx"
+# TODO: CVE listing is currently broken
+# INHERIT += "cve-check"
+# include cve-extra-exclusions.inc