iris-GmbH

iris-GmbH/meta-cyclonedx

A Yocto meta-layer for generating CycloneDX SBOMs

31 stars 25 forks 31 watchers BitBake Other
cyclonedx dependencies dependencytrack license-management nvd openembedded sbom sbom-generator vulnerability-management yocto
View on GitHub
5 Open Issues Need Help Last updated: Jul 4, 2026

Open Issues Need Help

View All on GitHub
Add required BOM fields for Dependency Track to show component dependencies 3 days ago
enhancement good first issue
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
feat: add CYCLONEDX_COMPONENT_PROPERTIES to attach custom properties to SBOM components 5 days ago
enhancement good first issue pull requests welcome
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Reimplement CYCLONEDX_INCLUDE_UNPATCHED_VULNS functionality in Wrynose and later 28 days ago
enhancement good first issue pull requests welcome
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Vulnerabilities are attributed to a mix of SBOMs during multi-output builds 7 months ago
enhancement help wanted
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Support CycloneDX spec 1.7 8 months ago
enhancement good first issue
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto