Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Generte the full system SBOM for the end2end example #5

Open
pahmann opened this issue Nov 22, 2022 · 2 comments
Open

Generte the full system SBOM for the end2end example #5

pahmann opened this issue Nov 22, 2022 · 2 comments
Milestone

Comments

@pahmann
Copy link
Collaborator

pahmann commented Nov 22, 2022

The AGL needlefish already can generate the SBOM using yocto tooling. A full system SBOM should also include Xen and Zephyr. In this task it should be checked, how to generate the SBOM for Xen and Zephyr. It may include to build Xen and Zephyr directly in yocto rahter than with e.g. west as for Zephyr. If the demo can be built with all elements created from Yocto the SBOM generation may become easier and consistent.

@pahmann pahmann added this to the e2e-extension milestone Nov 22, 2022
@pahmann
Copy link
Collaborator Author

pahmann commented Feb 12, 2024

This can be a good topic after qemu system is reproducible.

@pahmann
Copy link
Collaborator Author

pahmann commented Apr 29, 2024

Drafting first thoughts inside this document: https://docs.google.com/document/d/12jcC9CrGHlYwLBlFql6VLCsOmcl63paih2kj_1J55D

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant