Completed
Enabling SPDX Generation
Class Central Classrooms beta
YouTube videos curated by Class Central.
Classroom Contents
Software Supply Chain with the Yocto Project
Automatically move to the next video in the Classroom when playback concludes
- 1 Intro
- 2 Yocto Project and OpenEmbedded
- 3 Why is the Software Supply Chain Important?
- 4 Addressing The Supply Chain
- 5 Build Images from Source Code
- 6 Simplified Build Flow
- 7 What is an SBOM?
- 8 Recipe Metadata
- 9 SBOM Relationships
- 10 Enabling SPDX Generation
- 11 Future Improvements
- 12 Why do we need reproducible builds?
- 13 Binary output should associate with recipe hashes
- 14 Tracing target images back to recipe outputs
- 15 Reproducibility Testing
- 16 Extending Quality Assurance Test
- 17 CVE Tracking from Yocto Project
- 18 CVE Metrics
- 19 Buildtools replaces Host tools
- 20 Using Buildtools to extend the Supply Chain
