iris-GmbH

iris-GmbH/meta-cyclonedx

A Yocto meta-layer for generating CycloneDX SBOMs

7 good first / help-wanted issues · BitBake · last activity Jul 4, 2026

31 stars 25 forks 31 watchers BitBake Other
cyclonedx dependencies dependencytrack license-management nvd openembedded sbom sbom-generator vulnerability-management yocto
View on GitHub
7 Open Issues Need Help Last updated: Jul 4, 2026

Open Issues Need Help

View All on GitHub
Build error when setting CYCLONEDX_RUNTIME_PACKAGES_ONLY = "0" on Scarthgap about 2 months ago
bug help wanted
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Add required BOM fields for Dependency Track to show component dependencies 2 months ago
enhancement good first issue
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Add option to add Packages of other images to SBOM 3 months ago
enhancement help wanted
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
feat: add CYCLONEDX_COMPONENT_PROPERTIES to attach custom properties to SBOM components 4 months ago
enhancement good first issue pull requests welcome
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Reimplement CYCLONEDX_INCLUDE_UNPATCHED_VULNS functionality in Wrynose and later 5 months ago
enhancement good first issue pull requests welcome
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Vulnerabilities are attributed to a mix of SBOMs during multi-output builds 11 months ago
enhancement help wanted
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto
Support CycloneDX spec 1.7 12 months ago
enhancement good first issue
iris-GmbH/meta-cyclonedx
31

A Yocto meta-layer for generating CycloneDX SBOMs

BitBake
#cyclonedx#dependencies#dependencytrack#license-management#nvd#openembedded#sbom#sbom-generator#vulnerability-management#yocto