Create SBOM as a first step: https://github.com/aws4embeddedlinux/meta-aws-demos/pull/215 Then some vulnerability management