mirror of
https://git.yoctoproject.org/meta-arm
synced 2026-10-23 19:58:20 +00:00
Ross Burton
60202ad84d
Setting an API key means we get higher rate limits. Because keys are private, the key must be set in the environment of the runner. Signed-off-by: Ross Burton <ross.burton@arm.com> Signed-off-by: Jon Mason <jon.mason@arm.com>
20 lines
626 B
YAML
20 lines
626 B
YAML
header:
|
|
version: 14
|
|
|
|
local_conf_header:
|
|
cve: |
|
|
INHERIT += "cve-check"
|
|
|
|
# Allow the runner environment to provide an API key
|
|
NVDCVE_API_KEY = "${@d.getVar('BB_ORIGENV').getVar('NVDCVE_API_KEY') or ''}"
|
|
|
|
# Just show the warnings for our layers
|
|
CVE_CHECK_SHOW_WARNINGS = "0"
|
|
CVE_CHECK_SHOW_WARNINGS:layer-arm-toolchain = "1"
|
|
CVE_CHECK_SHOW_WARNINGS:layer-meta-arm = "1"
|
|
CVE_CHECK_SHOW_WARNINGS:layer-meta-arm-bsp = "1"
|
|
CVE_CHECK_SHOW_WARNINGS:layer-meta-arm-systemready = "1"
|
|
|
|
# Ignore the kernel, we sometime carry kernels in meta-arm
|
|
CVE_CHECK_SHOW_WARNINGS:pn-linux-yocto = "0"
|