cancel
Showing results for 
Search instead for 
Did you mean: 

gnu-tools-for-stm32: compiler info for the SBOM

vix
Associate II

I read the announcement from ST that a SBOM is provided for every package https://community.st.com/t5/developer-news/stm32cube-software-is-ready-for-automated-sbom-amp-security/ba-p/777224

This is ok and I find it for many repos.

But using STM32CubeMX + Cmake generation I can select

{
    "name": "gnu-tools-for-stm32",
    "version": "14.3.1+st.2"
},

as my toolchain.

I need to document in my SBOM which is the compiler used to build my firmware, and this compiler comes from ST.

So, where I can find exact info on the compiler included in "gnu-tools-for-stm32" version "14.3.1+st.2" so that I can add it to my SBOM?

 

Thnaks

0 REPLIES 0