Skip to content

fix debug output in case DEPENDENCYTRACK_API_URL is not set#9

Open
AndreasUfert wants to merge 14 commits into
bgnetworks:mainfrom
AndreasUfert:fix/debug_output_with_DEPENDENCYTRACK_API_URL_not_set
Open

fix debug output in case DEPENDENCYTRACK_API_URL is not set#9
AndreasUfert wants to merge 14 commits into
bgnetworks:mainfrom
AndreasUfert:fix/debug_output_with_DEPENDENCYTRACK_API_URL_not_set

Conversation

@AndreasUfert

Copy link
Copy Markdown

No description provided.

vasile.baluta and others added 14 commits June 2, 2022 18:55
Take CVE backport patches from the Yocto recipes into account by
uploading a VEX file resolving these.

Add support for CVE_CHECK_IGNORE variable

Take CVEs marked as ignored into account.

TODO: In newer versions of yocto, CVE_CHECK_IGNORE is deprecated in
favour of CVE_STATUS

Signed-off-by: Jasper Orschulko <jasper@fancydomain.eu>
Only publish to Dependency Track when URL is provided
Added version and timezone info so SBOM will pass CDX 1.4 validation and split vendor name per example
…-GmbH/meta-dependencytrack into iris-GmbH-add_support_for_yocto_cve_backports
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants