Does anyone in this forum have any advice or experience creating a software bill of materials (SBOM) for projects that use the CCS device or driver libraries? Or C projects in general? It's something that's only recently required for government and healthcare products, so there's not a lot of advice on the matter. I've got a project with almost exclusively custom code, but I'm using the device header for my microcontroller from CCS, and of course, the compiler. I'm somewhat at a loss of where to start. Any suggestions would be helpful. Thanks!
Ttelmah
Joined: 11 Mar 2010 Posts: 19538
Posted: Tue Dec 10, 2024 10:59 am
The key would be to document the source versions (release data, and
compiler version), for every library you use. Obviously the same for the
compiler version used.
Have a look at SPDX. This is the Microsoft tool to generate these, and
you can feed it the data from a CCS project.
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum