Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-128893

sbom for qtpdf gets lost , as it ends up as qtwebengine sbom

    XMLWordPrintable

Details

    • 65b08e924 (dev), 3163a99c0 (6.8), 43e166bd0 (dev), 9edd16898 (6.8), 42a58d661 (dev), 04c3e5e5a (6.9), a29566090 (dev), f19df5e7c (6.9), b42772e67 (6.8), 00ab21123 (6.8), 7166be522 (6.9), 60db51682 (dev), 59ae85da5 (6.8), 74e88184d (dev), ba890f909 (6.9)

    Description

      see falsely generated package:

      https://ci-files02-hki.ci.qt.io/packages/jenkins/qt/6.8.0/release_content/qtwebengine/qtwebengine-Windows-Windows_10_22H2-Mingw-Windows-Windows_10_22H2-X86_64.7z

      has sbom for qtpf which should be in

      https://ci-files02-hki.ci.qt.io/packages/jenkins/qt/6.8.0/release_content/qtwebengine/qtpdf-Windows-Windows_10_22H2-Mingw-Windows-Windows_10_22H2-X86_64.7z

      Despite the bug in pacakage splinting script sbom content should be named 'qtpdf' instead it is

       qtwebengine-6.8.0.spdx  
       qtwebengine-6~.0.spdx.json

      To fix the issue sbom has to have the proper name , and later the packaging script has to be updated (this not the issue for current bug report)

       

       

      Attachments

        Issue Links

          split from

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-122899 Generate SBOM from Qt build system

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • In Progress
          For Gerrit Dashboard: QTBUG-128893
          # Subject Branch Project Status CR V
          600557,2 qtpdf: workaround for wrong sbom file dev yocto/meta-qt6 Status: MERGED +2 0
          600677,2 qtpdf: workaround for wrong sbom file 6.8 yocto/meta-qt6 Status: MERGED +2 0
          604363,15 CMake: Support manual multiple projects within-a-repo SBOM generation dev qt/qtbase Status: MERGED +2 0
          604364,8 CMake: Create separate SBOM documents for QtWebEngine and QtPdf dev qt/qtwebengine Status: MERGED +2 0
          609602,2 CMake: Support manual multiple projects within-a-repo SBOM generation 6.8 qt/qtbase Status: MERGED +2 0
          609644,7 CMake: Remove SBOM multi-config dead code dev qt/qtbase Status: MERGED +2 0
          616125,2 CMake: Remove SBOM multi-config dead code 6.9 qt/qtbase Status: MERGED +2 0
          616166,2 CMake: Remove SBOM multi-config dead code 6.8 qt/qtbase Status: MERGED +2 0
          616306,2 CMake: Create separate SBOM documents for QtWebEngine and QtPdf 6.9 qt/qtwebengine Status: MERGED +2 0
          616422,2 CMake: Create separate SBOM documents for QtWebEngine and QtPdf 6.8 qt/qtwebengine Status: MERGED +2 0
          616816,4 qtwebengine: fix conflicting files with qtpdf 6.9 yocto/meta-qt6 Status: MERGED +2 0
          617561,2 qtwebengine: fix conflicting files with qtpdf dev yocto/meta-qt6 Status: MERGED +2 0
          617655,2 qtwebengine: fix conflicting files with qtpdf 6.8 yocto/meta-qt6 Status: MERGED +2 0
          618356,4 CMake: Only create sbom documents when the respective feature is on dev qt/qtwebengine Status: MERGED +2 0
          618979,2 CMake: Only create sbom documents when the respective feature is on 6.9 qt/qtwebengine Status: MERGED +2 0
          619453,4 CMake: Only create sbom documents when the respective feature is on 6.8 qt/qtwebengine Status: MERGED +2 0

          Activity

            People

              alexandru.croitor Alexandru Croitor
              michal Michal Klocek
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: