Functional Safety evidences require a set of all documents that proofs the complete implementation and verification of all relevant work products. This does not only include code and tests, but also every other associated piece of documentation, like requirement specifications, architecture and designs, safety analysis etc. In terms of the typical functional safety development this set is called safety case. This safety case is nothing else than an (S-)BOM of the safety release. This talk will demonstrate how SPDX relationships can be used to generate this "Safety SBOM" as evidence for a complete safety case.
Speakers: Nicole Pappler