coreboot-kgpe-d16/configs
Maximilian Brune 1d7a9debf2 Add SBOM (Software Bill of Materials) Generation
Firmware is typically delivered as one large binary image that gets
flashed. Since this final image consists of binaries and data from
a vast number of different people and companies, it's hard to
determine what all the small parts included in it are. The goal of
the software bill of materials (SBOM) is to take a firmware image
and make it easy to find out what it consists of and where those
pieces came from. Basically, this answers the question, who supplied
the code that's running on my system right now? For example, buyers
of a system can use an SBOM to perform an automated vulnerability
check or license analysis, both of which can be used to evaluate
risk in a product. Furthermore, one can quickly check to see if the
firmware is subject to a new vulnerability included in one of the
software parts (with the specified version) of the firmware.
Further reference:
https://web.archive.org/web/20220310104905/https://blogs.gnome.org/hughsie/2022/03/10/firmware-software-bill-of-materials/

- Add Makefile.inc to generate and build coswid tags
- Add templates for most payloads, coreboot, intel-microcode,
  amd-microcode. intel FSP-S/M/T, EC, BIOS_ACM, SINIT_ACM,
  intel ME and compiler (gcc,clang,other)
- Add Kconfig entries to optionally supply a path to CoSWID tags
  instead of using the default CoSWID tags
- Add CBFS entry called SBOM to each build via Makefile.inc
- Add goswid utility tool to generate SBOM data

Signed-off-by: Maximilian Brune <maximilian.brune@9elements.com>
Change-Id: Icb7481d4903f95d200eddbfed7728fbec51819d0
Reviewed-on: https://review.coreboot.org/c/coreboot/+/63639
Tested-by: build bot (Jenkins) <no-reply@coreboot.org>
Reviewed-by: Martin Roth <martin.roth@amd.corp-partner.google.com>
2022-08-22 14:48:46 +00:00
..
builder
config.asrock_b85m_pro4.debug_smmstore_hotplug_gcov_ubsan_em100
config.asrock_b85m_pro4.tpm2_txt_placeholder_acms
config.asus_a88xm-e.agesa_debug
config.asus_p2b_ramdebug
config.asus_p8z77-v_lx2.debug_smmstore_hotplug_yabel_em100
config.cavium_cn8100_sff_evb_bdk_verbose_fit_payload_support
config.dell_optiplex_9010_sff
config.emulation_qemu_aarch64_fit_support_timestamps
config.emulation_qemu_power9
config.emulation_qemu_riscv_rv64
config.emulation_qemu_x86_i440fx
config.emulation_qemu_x86_i440fx_asan
config.emulation_qemu_x86_i440fx_debug
config.emulation_qemu_x86_i440fx_noserial
config.emulation_qemu_x86_i440fx_x86_64
config.emulation_qemu_x86_q35_smm_tseg
config.facebook_fbg1701.mboot_vboot
config.facebook_fbg1701.sbom Add SBOM (Software Bill of Materials) Generation 2022-08-22 14:48:46 +00:00
config.foxconn_g41m
config.gigabyte_ga-g41m-es2l
config.google_guado.pch_serialio_uart
config.google_kevin_secdata_mock
config.google_meep_cros treewide: Unify Google branding 2022-07-04 14:02:26 +00:00
config.google_octopus_spi_flash_console
config.google_panther.pch_serialio_uart
config.google_reef_cros
config.google_trogdor.build_test
config.google_volteer.build_test_purposes
config.hp_compaq_8200_elite_sff_pc.x86_64
config.intel_coffeelake_rvp11.fsp_car
config.intel_galileo_gen1
config.intel_galileo_gen2
config.intel_galileo_gen2.debug
config.intel_galileo_gen2.fsp2.0
config.intel_galileo_gen2.sd
config.intel_galileo_gen2.vboot
config.intel_harcuvar
config.lenovo_t400_vboot_and_debug nb/intel/gm45: Enable 64bit support 2022-05-13 10:57:41 +00:00
config.lenovo_t420_static_option_table_no_mem_fuses
config.lenovo_thinkpad_t430_all_debug_and_option_table
config.lenovo_x201_all_debug_option_table_bt_on_wifi
config.lenovo_x220_mrc_bin
config.lenovo_x220_option_table_debug_tpm_extended_cbfs
config.libretrend_lt1000
config.msi_ms7d25 payloads/tianocore: Rename TianoCore to edk2 2022-08-13 16:35:18 +00:00
config.ocp_deltalake_cbnt
config.ocp_tiogapass
config.pcengines_apu1
config.pcengines_apu2
config.pcengines_apu3
config.pcengines_apu4
config.pcengines_apu5
config.portwell_m107.debug_smmstore_oxpcie_em100spi
config.prodrive_hermes configs: Update prodrive hermes 2022-07-14 12:48:20 +00:00
config.purism_librem15_v4.txt_build_test
config.purism_librem15_v4_stm
config.scaleway_tagada
config.system76_gaze15 payloads/tianocore: Rename TianoCore to edk2 2022-08-13 16:35:18 +00:00
config.system76_lemp9 payloads/tianocore: Rename TianoCore to edk2 2022-08-13 16:35:18 +00:00
config.system76_oryp5 payloads/tianocore: Rename TianoCore to edk2 2022-08-13 16:35:18 +00:00
config.up_squared.vboot_spi_flash_console