Generate SBOM from Qt build system

• Type: User Story
• Resolution: Unresolved
• Priority: P2: Important
• Fix Version/s: None
• Affects Version/s: None
• Component/s: Build System: CMake
• Labels:

  • EUCRA
  • Reported_by_support_standard

For Gerrit Dashboard: QTBUG-122899
#	Subject	Branch	Project	Status	CR	V
562057,4	CMake: Annotate some targets with SBOM information	dev	qt/qtmultimedia	Status: NEW	0	0
562482,13	coin: Mark platforms that should generate an SBOM	dev	qt/qt5	Status: NEW	+2	0
565524,6	WIP: CMake: Add SBOM information for some QtPdf 3rd party libraries	dev	qt/qtwebengine	Status: NEW	-2	0
566580,36	WIP: CMake: Sample user project with sbom generation	dev	qt/qtbase	Status: NEW	-2	0
566948,2	CMake: Annotate some targets with SBOM information	dev	qt/qtshadertools	Status: NEW	0	0
566961,4	CMake: Annotate some targets with SBOM information	dev	qt/qtimageformats	Status: NEW	0	0
567246,2	CMake: Annotate some targets with SBOM information	dev	qt/qtdeclarative	Status: NEW	0	0
567248,4	CMake: Annotate some targets with SBOM information	dev	qt/qtquick3d	Status: NEW	0	0
567353,1	CMake: Annotate some targets with SBOM information	dev	qt/qt5compat	Status: NEW	0	0
567354,1	CMake: Annotate some targets with SBOM information	dev	qt/qt3d	Status: NEW	0	0
567361,2	CMake: Annotate some targets with SBOM information	dev	qt/qtgrpc	Status: NEW	0	0
567364,2	CMake: Annotate some targets with SBOM information	dev	qt/qtopcua	Status: NEW	0	0
567385,1	CMake: Annotate some targets with SBOM information	dev	qt/qttools	Status: NEW	0	0
567977,7	coin: Mark platforms that should verify the generated SBOM	dev	qt/qt5	Status: NEW	0	0
568823,1	CMake: Annotate some targets with SBOM information	dev	qt/qtactiveqt	Status: NEW	0	0
569210,1	CMake: Annotate some targets with SBOM information	dev	qt/qtmqtt	Status: NEW	0	0
569231,1	CMake: Annotate some targets with SBOM information	dev	qt/qtcoap	Status: NEW	0	0
569234,1	CMake: Annotate some targets with SBOM information	dev	qt/qtgraphs	Status: NEW	0	0
569235,1	CMake: Annotate some targets with SBOM information	dev	qt/qtlottie	Status: NEW	0	0
569236,1	CMake: Annotate some targets with SBOM information	dev	qt/qtquicktimeline	Status: NEW	0	0
569237,1	CMake: Annotate some targets with SBOM information	dev	qt/qtnetworkauth	Status: NEW	0	0
569239,1	CMake: Annotate some targets with SBOM information	dev	qt/qtquick3dphysics	Status: NEW	0	0
569240,1	CMake: Annotate some targets with SBOM information	dev	qt/qtcharts	Status: NEW	0	0
569241,1	CMake: Annotate some targets with SBOM information	dev	qt/qtapplicationmanager	Status: NEW	0	0
569242,1	CMake: Annotate some targets with SBOM information	dev	qt/qtquickeffectmaker	Status: NEW	0	0
569243,1	CMake: Annotate some targets with SBOM information	dev	qt/qtvirtualkeyboard	Status: NEW	0	0
569252,4	CMake: Annotate some targets with SBOM information	dev	qt/qtwayland	Status: NEW	0	0
569253,1	CMake: Annotate some targets with SBOM information	dev	qt/qthttpserver	Status: NEW	0	0
569254,1	CMake: Annotate some targets with SBOM information	dev	qt/qtdatavis3d	Status: NEW	0	0
569264,5	CMake: Move each wayland protocol into a separate subdirectory	dev	qt/qtwayland	Status: NEW	+1	+1
546923,130	CMake: Generate an SPDX v2.3 SBOM file for each built repository	dev	qt/qtbase	Status: MERGED	+2	0
549874,8	WIP: CMake: Add 3rd party cmake module for sbom generation	dev	qt/qtbase	Status: ABANDONED	-2	0
549875,8	WIP: CMake: Add a way to declare custom license IDs in cmake-sbom	dev	qt/qtbase	Status: ABANDONED	-2	0
551778,9	WIP: CMake: Add a way to add extra project packages to the SBOM doc	dev	qt/qtbase	Status: ABANDONED	-2	0
551943,8	WIP: CMake: Allow setting package copyright text	dev	qt/qtbase	Status: ABANDONED	-2	0
561475,46	coin: Add instructions for generating an SBOM when installing Qt	dev	qt/qtbase	Status: MERGED	+2	0
561694,21	coin: Add python packages to allow validating Qt generated SBOM files	dev	qt/qt5	Status: MERGED	+2	0
564427,41	CMake: Annotate some targets with SBOM information	dev	qt/qtbase	Status: MERGED	+2	0
567323,20	coin: CMake: Add instructions to generate JSON and verify the SBOM	dev	qt/qtbase	Status: MERGED	+2	0
568425,2	CMake: Generate an SPDX v2.3 SBOM file for each built repository	6.8	qt/qtbase	Status: MERGED	+2	0
568426,3	CMake: Annotate some targets with SBOM information	6.8	qt/qtbase	Status: MERGED	+2	0
568427,2	coin: Add instructions for generating an SBOM when installing Qt	6.8	qt/qtbase	Status: MERGED	+2	0
568820,3	CMake: Fix assigning per-directory variable license in SBOM	dev	qt/qtbase	Status: MERGED	+2	0
568821,7	CMake: Improve license handling for SBOMs	dev	qt/qtbase	Status: MERGED	+2	0
568822,7	CMake: Correctly annotate the Entrypoint (winmain) SBOM license ID	dev	qt/qtbase	Status: MERGED	+2	0
568829,2	CMake: Allow specifying most SBOM options to qt_internal_add_foo	dev	qt/qtbase	Status: MERGED	+2	0
569232,4	CMake: Mark wasm platform plugin as GPL3 in SBOM	dev	qt/qtbase	Status: MERGED	+2	0
569587,2	CMake: Fix assigning per-directory variable license in SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
569588,2	CMake: Allow specifying most SBOM options to qt_internal_add_foo	6.8	qt/qtbase	Status: MERGED	+2	0
569589,2	CMake: Improve license handling for SBOMs	6.8	qt/qtbase	Status: MERGED	+2	0
569590,2	CMake: Correctly annotate the Entrypoint (winmain) SBOM license ID	6.8	qt/qtbase	Status: MERGED	+2	0
569611,3	CMake: Mark wasm platform plugin as GPL3 in SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
570165,2	coin: Add python packages to allow validating Qt generated SBOM files	6.8	qt/qt5	Status: INTEGRATING	+2	0
570347,5	CMake: Disable generating SBOM for qtqa	dev	qt/qtqa	Status: MERGED	+2	0
570384,3	CMake: Only record existing system library targets for SBOM	dev	qt/qtbase	Status: MERGED	+2	0
570388,5	CMake: Handle system alias targets when recording them for the SBOM	dev	qt/qtbase	Status: MERGED	+2	0
570390,5	CMake: Make ninja 'sbom' work for top-level builds	dev	qt/qtbase	Status: MERGED	+2	0
570446,2	coin: CMake: Add instructions to generate JSON and verify the SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
570634,3	CMake: Allow force disabling generation of SBOM	dev	qt/qtbase	Status: MERGED	+2	0
570661,2	CMake: Ensure the OpenSSL targets are global for SBOM generation	dev	qt/qtopcua	Status: MERGED	+2	+1
570663,4	CMake: Skip handling binary files in SBOM for excluded targets	dev	qt/qtbase	Status: MERGED	+2	0
570664,4	CMake: Rework Python interpreter finding for SBOM	dev	qt/qtbase	Status: MERGED	+2	0
571300,2	CMake: Only record existing system library targets for SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
571301,2	CMake: Handle system alias targets when recording them for the SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
571302,2	CMake: Allow force disabling generation of SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
571303,2	CMake: Skip handling binary files in SBOM for excluded targets	6.8	qt/qtbase	Status: MERGED	+2	0
571304,2	CMake: Rework Python interpreter finding for SBOM	6.8	qt/qtbase	Status: MERGED	+2	0
571305,2	CMake: Make ninja 'sbom' work for top-level builds	6.8	qt/qtbase	Status: MERGED	+2	0
571544,2	CMake: Ensure the OpenSSL targets are global for SBOM generation	6.8	qt/qtopcua	Status: MERGED	+2	0