diff --git a/README.md b/README.md index 9c3a3a9..a2398f7 100644 --- a/README.md +++ b/README.md @@ -283,6 +283,29 @@ VIGILES_KERNEL_CONFIG = "/projects/kernel/linux-4.14-ts+imx-1.0/.config" ``` +### U-Boot Config Filter + +The Vigiles CVE Scanner can be configured to upload a U-Boot _.config_ file to LinuxLink along with the image manifest. This filter will reduce the number of U-Boot CVEs reported by removing those related to features which are not being built for your U-Boot. There are 2 ways to enable this feature -- Automatic Detection or Manual Specification + +* Automatic Detection + +This will use the _.config_ for the U-Boot specified in ```PREFERRED_PROVIDER_virtual/bootloader``` once the Yocto task ```do_configure``` is executed. + + +``` +VIGILES_UBOOT_CONFIG = "auto" +``` + + +* Manual Specification + +**NOTE: This must be a _full_ U-Boot config, not a defconfig!** + +``` +VIGILES_UBOOT_CONFIG = "" +``` + + ### Specifying a LinuxLink Key File Full CVE reporting requires a LinuxLink License Key, though the Vigiles CVE Scanner will still execute in