I have a branch called jpew/sbom in poky-contrib with my WIP changes. 

http://git.yoctoproject.org/cgit.cgi/poky-contrib/log/?h=jpew/sbom

On Thu, Aug 19, 2021, 11:04 AM Marta Rybczynska <rybczynska@gmail.com> wrote:

On Wed, Aug 11, 2021 at 4:52 PM Joshua Watt <JPEWhacker@gmail.com> wrote:
Moving the function will allow other classes to capture which CVEs have
been patched, in particular SBoM generation.

Also add a function to capture the CPE ID from the CVE Product and
Version


Do you have a link to some resource on how you plan to use it for SBOM generation?

Thanks,
Marta