sbom: generate SBOMs from every wolfBoot build system - #830

Open

sameehj wants to merge 15 commits into

wolfSSL:masterfrom

sameehj:sbom-wolfboot-full

Commits on Aug 13, 2026

sbom: generate SBOMs from every wolfBoot build system
sameehj
committed
ada8e6d
sbom: expand CI to prove toolchain neutrality and cross-target coverage
sameehj
committed
66842da
Vendor wolfGlass SBOM tooling and switch wolfBoot to it
sameehj
committed
d4b3d5d
sbom: re-vendor wolfGlass tip and harden Make-path SBOM tooling
sameehj
committed
a2cfcb1
sbom: record the real build configuration
sameehj
committed
799cbcb
sbom: identify the embedded wolfSSL so a CPE-driven scan can see it
sameehj
committed
50f9c53
sbom: describe the wolfSSL the image really holds
sameehj
committed
f888961
sbom: emit the registered wolfBoot CPE after NVD publication
sameehj
committed
341e326
sbom: pin the vendored wolfGlass copy to a revision that resolves
sameehj
committed
fdd5180
sbom: build each cross-target SBOM for the target its config selects
sameehj
committed
b783ffa
sbom: fail when an object maps to no source, instead of shrinking the SBOM
sameehj
committed
ec4f833
sbom: name each document after the configuration it describes
sameehj
committed
52c1349
docs: state what the wolfBoot SBOM does not cover
sameehj
committed
a050aee
sbom: run the wolfGlass drift check on every pull request
sameehj
committed
d0fb517
sbom: generate the keystore before checking the source list
sameehj
committed
5efa184