diff --git a/meta-balena-common/conf/distro/include/balena-os.inc b/meta-balena-common/conf/distro/include/balena-os.inc
index 6531a00353..d522b4f281 100644
--- a/meta-balena-common/conf/distro/include/balena-os.inc
+++ b/meta-balena-common/conf/distro/include/balena-os.inc
@@ -150,3 +150,8 @@ BALENA_NONENC_BOOT_MOUNT ?= "/mnt/${@'${BALENA_NONENC_BOOT_LABEL}'.replace('bale
 # This is the docker API version for v20.10
 # balena version --format '{{.Server.APIVersion}}'
 BALENA_API_VERSION ?= "1.41"
+
+# Generate SBOM and CVE listing https://docs.yoctoproject.org/dev/ref-manual/classes.html#ref-classes-create-spdx
+INHERIT += "create-spdx"
+INHERIT += "cve-check"
+include cve-extra-exclusions.inc