Hi,
I noticed that digi dey 5.0 can output a “CCSS” SBOM called manifest.json. This is compact and a nice and clean artefact. But for CRA compliance we need an full image SPDX or Cyclone DX SBOM. Is it possible to create such with dey 5.0 (based on yocot scarthgap)?
Cheers,
Matthias