Security Improvements in Yocto Project Styhead - Security Tools and Compliance Updates
Yocto Project via YouTube
Learn AI, Data Science & Business — Earn Certificates That Get You Hired
Earn a Michigan Engineering AI Certificate — Stay Ahead of the AI Revolution
Overview
AI, Data Science & Cloud Certificates from Google, IBM & Meta — 40% Off
One plan covers every Professional Certificate on Coursera. 40% off Coursera Plus Annual.
Unlock All Certificates
Learn about critical security improvements in the Yocto Project's Styhead release through this 24-minute technical talk. Explore the comprehensive rework of security-related tools, including the modernization of cve-check functionality, implementation of VEX class, and removal of legacy cve-check text format. Discover the enhanced SBOM generation capabilities, featuring the new SPDX3 integration, and understand important policy modifications affecting Poky's production use. Gain essential insights into how the Yocto Project adapts to evolving open-source security challenges, including responses to the Linux kernel CNA, Rust adoption, and the xz incident. Particularly valuable for developers planning product releases for 2025 and beyond, addressing upcoming secure-by-default legislation requirements.
Syllabus
YPS 2024.12 - Marta Rybczynska - Security improvements in styhead
Taught by
Yocto Project