CRA compliant SBOM generation with DEY

[mafux]

Hi,

I noticed that digi dey 5.0 can output a “CCSS” SBOM called manifest.json. This is compact and a nice and clean artefact. But for CRA compliance we need an full image SPDX or Cyclone DX SBOM. Is it possible to create such with dey 5.0 (based on yocot scarthgap)?

Cheers,

Matthias

[thomas.kuhlmann]

@mafux

noticed that digi dey 5.0 can output a “CCSS” SBOM called manifest.json. This is compact and a nice and clean artefact. But for CRA compliance we need an full image SPDX or Cyclone DX SBOM. Is it possible to create such with dey 5.0 (based on yocot scarthgap)?

there is a payed service for this, see: Digi ConnectCore Security Services | Digi International and contact your Digi embedded sales for details: Contact Digi Sales | Digi International