mirror of
https://github.com/espressif/esp-idf.git
synced 2026-09-22 13:01:16 +03:00
Document the create --format option (SPDX 2.2 tag/value and JSON, SPDX 3.0.1 JSON-LD, and CycloneDX 1.6) and the new --file option on idf.py sbom-create and sbom-check, and generalize the previously SPDX-only wording. Note the NVDAPIKEY variable for faster online scans, document that sbom-check exits with a non-zero status when vulnerabilities are found, drop an unused link target, and update the SBOM reference link. Fix the section heading levels to follow the esp-docs conventions.