Generating SBOM for STM32 firmware projects

[Zainulabedeen]

I want to generate an SBOM (Software Bill of Materials) for my STM32 firmware project, specifically targeting the STM32H733 microcontroller. I have tried searching for guides or examples of how others have done this for similar projects, but I haven’t been able to find any detailed resources. Any guidance or references on generating an SBOM for my firmware project would be greatly appreciated.

[Andrew Neil]

Does this help?

STM32Cube software is ready for automated SBOM & security processes with Black Duck tools.

[Zainulabedeen]

I am currently looking for a solution that works now, as I believe the link you shared refers to a planned feature that isn’t yet implemented for STM32H7. I’m interested in learning what approaches others have used—either currently or in the past—to generate an SBOM for their STM32-based firmware projects ?

[Dor_RH · Accepted solution]

Hello @Zainulabedeen, 

The SBOM for STM32CubeH7 firmware package version 1.12.1, which supports the STM32H733 microcontroller, is available now on GitHub. You can access it here: https://github.com/STMicroelectronics/STM32CubeH7

I hope my answer has been helpful. When your question is resolved, please mark this topic as the solution. This will help others find the answer more quickly.

Thank you for your contribution.

Best regards,
Dor_RH