sbom: generate SBOMs from every wolfBoot build system - #830

Merged

danielinux merged 16 commits into

wolfSSL:masterfrom

sameehj:sbom-wolfboot-full

Aug 20, 2026

Commits on Aug 20, 2026

sbom: generate SBOMs from every wolfBoot build system
sameehj
committed
155a822
sbom: expand CI to prove toolchain neutrality and cross-target coverage
sameehj
committed
0535977
Vendor wolfGlass SBOM tooling and switch wolfBoot to it
sameehj
committed
5069f79
sbom: re-vendor wolfGlass tip and harden Make-path SBOM tooling
sameehj
committed
2164a34
sbom: record the real build configuration
sameehj
committed
8f9e514
sbom: identify the embedded wolfSSL so a CPE-driven scan can see it
sameehj
committed
d859708
sbom: describe the wolfSSL the image really holds
sameehj
committed
18db4fb
sbom: emit the registered wolfBoot CPE after NVD publication
sameehj
committed
6ad1f87
sbom: pin the vendored wolfGlass copy to a revision that resolves
sameehj
committed
d3bd34e
sbom: build each cross-target SBOM for the target its config selects
sameehj
committed
5eb1429
sbom: fail when an object maps to no source, instead of shrinking the SBOM
sameehj
committed
74bdc1b
sbom: name each document after the configuration it describes
sameehj
committed
d1e1834
docs: state what the wolfBoot SBOM does not cover
sameehj
committed
048b0d9
sbom: run the wolfGlass drift check on every pull request
sameehj
committed
67a36d6
sbom: generate the keystore before checking the source list
sameehj
committed
e44b2e1
sbom: re-vendor wolfGlass at b44ae8d
sameehj
committed
c33c3e5