Open stephanosio opened 2 years ago
cc @galak
For the purpose of MISRA compliance, all the documentation regarding the implementation-defined behaviors has to be identified. Typically this includes the manuals of: the C preprocessor (e.g., for GCC, the appropriate version of cpp.pdf), the C compiler (e.g., gcc.pdf), linker (e.g., ld.pdf), assembler, librarian, and the standard library implementation (sometimes the manual of the mathematical library is a separate document). Ideally, the SDK should contain the documentation. If this is unfeasible, links to the applicable documentation would be great. The alternative, error-prone approach of having of each developer or QA person searching for the applicable documentation is suboptimal (and not in line with the spirit of MISRA C Directive 1.1).
(suggested in the Toolchain WG meeting today by Roberto Bagnara)
Document and distribute an SBOM (software bill of materials) with each Zephyr SDK release to help users easily identify all included components and their versions.
An SBOM shall: