From b2878dc2024bd861513b1ac960d9524185e79679 Mon Sep 17 00:00:00 2001
From: Edwin Joassart <edwin@blck.coffee>
Date: Thu, 22 Aug 2024 16:06:05 +0200
Subject: [PATCH] patch: generate SBOM & CVE check

---
 meta-balena-common/conf/distro/include/balena-os.inc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/meta-balena-common/conf/distro/include/balena-os.inc b/meta-balena-common/conf/distro/include/balena-os.inc
index 716d3186f4..fb418d6224 100644
--- a/meta-balena-common/conf/distro/include/balena-os.inc
+++ b/meta-balena-common/conf/distro/include/balena-os.inc
@@ -150,3 +150,9 @@ BALENA_NONENC_BOOT_MOUNT ?= "/mnt/${@'${BALENA_NONENC_BOOT_LABEL}'.replace('bale
 # This is the docker API version for v20.10
 # balena version --format '{{.Server.APIVersion}}'
 BALENA_API_VERSION ?= "1.41"
+
+# Generate SBOM https://docs.yoctoproject.org/dev/ref-manual/classes.html#ref-classes-create-spdx
+INHERIT += "create-spdx"
+# TODO: CVE listing is currently broken
+# INHERIT += "cve-check"
+# include cve-extra-exclusions.inc
\ No newline at end of file