mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
af55c1a39b
The 'bom-ref' are optional and since we don't reference the vulnerabilities from anywhere else in the SBOM they are not necessary in this case. In the following commit, cve-check will potentially emit multiple vulnerabilities that have the same id. So using the vulnerability id as 'bom-ref' won't be correct as the 'bom-ref' needs to be unique unlike the id property. Signed-off-by: Thomas Perale <thomas.perale@mind.be> Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>