2026-06-08 7:58 AM
I read the announcement from ST that a SBOM is provided for every package https://community.st.com/t5/developer-news/stm32cube-software-is-ready-for-automated-sbom-amp-security/ba-p/777224
This is ok and I find it for many repos.
But using STM32CubeMX + Cmake generation I can select
{
"name": "gnu-tools-for-stm32",
"version": "14.3.1+st.2"
},
as my toolchain.
I need to document in my SBOM which is the compiler used to build my firmware, and this compiler comes from ST.
So, where I can find exact info on the compiler included in "gnu-tools-for-stm32" version "14.3.1+st.2" so that I can add it to my SBOM?
Thnaks
We’re moving the ST Community to a new platform to give you a better and more reliable community experience.