diff mbox series

[2/2] sbom-cve-check: enable offline mode

Message ID 20260907-sbom-cve-check-update-1-3-4-v1-2-93034b6bd44c@bootlin.com
State New
Headers show
Series sbom-cve-check: Update to version 1.3.4 and enable offline mode | expand

Commit Message

Benjamin Robin Sept. 7, 2026, 12:11 p.m. UTC 
Since v1.3.4, `sbom-cve-check` includes a new `--offline-mode` flag that
raises an error if a git command requiring network access is executed.
Note that `--offline-mode` does not automatically enable
`--disable-auto-updates`, so both flags must be specified explicitly.

For example, with the `--offline-mode` flag, if the CVE database is not
already deployed, `sbom-cve-check` will not attempt to clone the git
database, it will generate an explicit error instead.

Signed-off-by: Benjamin Robin (Schneider Electric) <benjamin.robin@bootlin.com>
---
 meta/classes/sbom-cve-check-common.bbclass | 1 +
 1 file changed, 1 insertion(+)
diff mbox series

Patch

diff --git a/meta/classes/sbom-cve-check-common.bbclass b/meta/classes/sbom-cve-check-common.bbclass
index 1bd1af22b6cb..7918cb25f2a7 100644
--- a/meta/classes/sbom-cve-check-common.bbclass
+++ b/meta/classes/sbom-cve-check-common.bbclass
@@ -102,6 +102,7 @@  def run_sbom_cve_check(d, sbom_path, export_base_name, export_link_name=None):
         "--sbom-path",
         sbom_path,
         "--disable-auto-updates",
+        "--offline-mode",
         "--export-process-native",
         scan_scope,
     ]