search

bgnetworks / meta-dependencytrack

A Yocto meta-layer for generating CycloneDX SBOMs and automatically uploading them to Dependency Track.
https://bgnet.works
Other
18 stars 22 forks source link

Dependency-Tree #7

Open xRate1337 opened 7 months ago

xRate1337 commented 7 months ago

Does someone knows how I can create a SBOM of my Yocto Project, that shows the dependency tree in Dependency-Track of my packages?

Jasper-Ben commented 3 months ago

I do not think that is a simple feat. You could try experimenting with extracting the necessary information from the dependency dot file generated with bitbake -g, see https://docs.yoctoproject.org/bitbake/2.8/bitbake-user-manual/bitbake-user-manual-intro.html#the-bitbake-command