Hello Daniel,

I made some tests with the new vex class. I may be wrong, but it doesn't seem like an issue linked with improve_kernel_cve_report bbclass.

I tried to clean the build, remove "inherit improve_kernel_cve_report", and keep "INHERIT += "vex"" . But, the cve-summary file is still empty after the rebuild.

If I change back to "cve-check" (still without improve_kernel_cve_report class) cve-summary seems correct and not empty.

It looks more like a vex class issue. Also, VEX does not seem to recreate a new .json file at every build, which is strange.