EmberBOM Scan Report
Offline build evidence summary; this report does not provide legal or compliance conclusions.
Project Summary
Projectstm32-cmake
Build Configurationunknown
Firmwareunknown
Tool / Rulesv0.1.0-rc.9 / 1
Confirmed1
Strong0
Needs Review1
Unknown Build Inputs1
Unmatched Build Inputs4
Candidates Not in This Build2
Findings Summary
- FreeRTOS-Kernel was confirmed in this firmware build.
- mbedTLS was included with local changes and needs review.
- libvendor.a participated in the build but could not be identified.
- build/t046/CMakeFiles/firmware.dir/src/main.c.obj participated in the build but was not assigned to a dependency component.
- build/t046/CMakeFiles/firmware.dir/src/startup.c.obj participated in the build but was not assigned to a dependency component.
- src/main.c participated in the build but was not assigned to a dependency component.
- src/startup.c participated in the build but was not assigned to a dependency component.
- FatFs exists in the source tree but was not part of this build.
- opaque exists in the source tree but was not part of this build.
Components
2 itemsConfirmed: component identity is supported by build evidence. Strong: build evidence is strong, but confirmation may still be needed. NeedsReview: local changes or incomplete identity require review. Unknown: the build input could not be identified reliably.
| Status | Component | Version | Licenses | Evidence |
|---|---|---|---|---|
| Confirmed | FreeRTOS-Kernel | V10.6.1 | MIT | 3 items |
| NeedsReview | mbedTLS | mbedtls-3.5.1 | Apache-2.0 | 4 items |
FreeRTOS-Kernel · Confirmed
Stable IDcomponent:freertos-kernel
Sourcehttps://github.com/FreeRTOS/FreeRTOS-Kernel
Locally ModifiedNo
Review Note
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| compile | vendor/FreeRTOS-Kernel/list.c | source appears in compile_commands.json | unknown |
| identity | vendor/FreeRTOS-Kernel | git origin https://github.com/FreeRTOS/FreeRTOS-Kernel.git; commit 0264280230aa6a828247b5f05bf57e33f1994581; exact tag V10.6.1 | unknown |
| link | build/t046/libfreertos_kernel.a | archive members linked: list.c.obj | unknown |
mbedTLS · NeedsReview
Stable IDcomponent:mbedtls
Sourcehttps://github.com/Mbed-TLS/mbedtls
Locally ModifiedYes
Review Note
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| compile | vendor/mbedtls/library/version.c | source appears in compile_commands.json | unknown |
| identity | vendor/mbedtls | git origin https://github.com/Mbed-TLS/mbedtls.git; commit edb8fec9882084344a314368ac7fd957a187519c; exact tag mbedtls-3.5.1 | unknown |
| link | build/t046/libmbedtls.a | archive members linked: local_policy_patch.c.obj, version.c.obj | unknown |
| patch | patches/mbedtls/local_policy_patch.c | local patch source appears in compile_commands.json | unknown |
Unknown Build Inputs
1 itemThese objects participated in the build, but their component identity could not be determined reliably.
| Type | Path | Static Library | Build Configuration | Evidence |
|---|---|---|---|---|
| static_library | build/t046/libvendor.a | libvendor.a | unknown | 1 item |
libvendor.a build/t046/libvendor.a · Build Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| link | build/t046/firmware.map | archive members linked: vendor_blob.o | unknown |
Unmatched Build Inputs
4 itemsThese compiled sources or linked objects were not assigned to a dependency component. They may be project code or dependencies that need review.
| Type | Path | Build Configuration | Evidence |
|---|---|---|---|
| object_file | build/t046/CMakeFiles/firmware.dir/src/main.c.obj | unknown | 1 item |
| object_file | build/t046/CMakeFiles/firmware.dir/src/startup.c.obj | unknown | 1 item |
| source_file | src/main.c | unknown | 1 item |
| source_file | src/startup.c | unknown | 1 item |
build/t046/CMakeFiles/firmware.dir/src/main.c.obj · Build Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| link | build/t046/firmware.map | linked object was not assigned to a dependency component | unknown |
build/t046/CMakeFiles/firmware.dir/src/startup.c.obj · Build Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| link | build/t046/firmware.map | linked object was not assigned to a dependency component | unknown |
src/main.c · Build Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| compile | src/main.c | compiled source was not assigned to a dependency component | unknown |
src/startup.c · Build Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| compile | src/startup.c | compiled source was not assigned to a dependency component | unknown |
Candidates Not in This Build
2 itemsThese candidates exist in the source tree but have no evidence from this build, so they are not included in the SBOM.
| Candidate | Path | Exclusion Reason | Evidence |
|---|---|---|---|
| FatFs | vendor/FatFs | NotBuilt: no source appears in compile_commands.json | 1 item |
| opaque | vendor/opaque | NotBuilt: no source appears in compile_commands.json | 1 item |
FatFs · Exclusion Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| exclusion | vendor/FatFs | source-tree candidate has no compile evidence | unknown |
opaque · Exclusion Evidence
| Type | Path | Details | Build Configuration |
|---|---|---|---|
| exclusion | vendor/opaque | source-tree candidate has no compile evidence | unknown |