This may not be the proper place for this information as perhaps the About page on Bootlin is better suited. After switching to the Bootlin toolchains for a project, we worked with our security team to come up with a story on why the Bootlin toolchains can be trusted since we were no longer building the toolchain from source. Upstreaming with a more general description than what we documented for the toolchains we are using to share for others. Please add any corrections to the process or further clarification that is wanted as comments.
Update to add description of automated process as a proof of trust for the toolchains hosted by Bootlin.
Signed-off-by: Jared Bents jared.bents@rockwellcollins.com
This may not be the proper place for this information as perhaps the About page on Bootlin is better suited. After switching to the Bootlin toolchains for a project, we worked with our security team to come up with a story on why the Bootlin toolchains can be trusted since we were no longer building the toolchain from source. Upstreaming with a more general description than what we documented for the toolchains we are using to share for others. Please add any corrections to the process or further clarification that is wanted as comments.