Greetings,<br /><br />In the current version of cve-check there is no way of creating the manifest when building world. The reason why is due to these two lines:
<blockquote>ROOTFS_POSTPROCESS_COMMAND:prepend = "${@'cve_check_write_rootfs_manifest; ' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}"<br />do_rootfs[recrdeptask] += "${@'do_cve_check' if d.getVar('CVE_CHECK_CREATE_MANIFEST') == '1' else ''}"</blockquote>
The problem is that in world there is no do_rootfs so the function cve_check_write_rootfs_manifest is never executed hence the manifest is not created.<br />My idea was to convert cve_check_write_rootfs_manifest to a handler listening for BuildCompleted but then if someone builds more than one image the output is broken.<br />Any suggestions are welcome and appreciated, thanks!<br /><br />Davide