Yocto Integration

VulnScout can be integrated into your Yocto/OpenEmbedded build workflow using the meta-vulnscout BSP layer.

meta-vulnscout

The meta-vulnscout layer provides recipes and classes to automatically run VulnScout vulnerability analysis as part of your Yocto build process. It handles SBOM generation, vulnerability scanning, and report collection.

Features

  • Automatic SBOM extraction from Yocto builds

  • Integration with the VulnScout scanning pipeline

  • Support for SPDX 2 and SPDX 3 SBOM formats

  • CI/CD-ready with configurable fail conditions

Getting Started

Full documentation, installation instructions, and configuration options are available on the meta-vulnscout documentation site: