Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-128893

sbom for qtpdf gets lost , as it ends up as qtwebengine sbom

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • P2: Important
    • None
    • 6.8.0 RC
    • Build System: CMake
    • None
    • 65b08e924 (dev), 3163a99c0 (6.8), 43e166bd0 (dev), 9edd16898 (6.8)

    Description

      see falsely generated package:

      https://ci-files02-hki.ci.qt.io/packages/jenkins/qt/6.8.0/release_content/qtwebengine/qtwebengine-Windows-Windows_10_22H2-Mingw-Windows-Windows_10_22H2-X86_64.7z

      has sbom for qtpf which should be in

      https://ci-files02-hki.ci.qt.io/packages/jenkins/qt/6.8.0/release_content/qtwebengine/qtpdf-Windows-Windows_10_22H2-Mingw-Windows-Windows_10_22H2-X86_64.7z

      Despite the bug in pacakage splinting script sbom content should be named 'qtpdf' instead it is

       qtwebengine-6.8.0.spdx  
       qtwebengine-6~.0.spdx.json

      To fix the issue sbom has to have the proper name , and later the packaging script has to be updated (this not the issue for current bug report)

       

       

      Attachments

        Issue Links

          split from

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-122899 Generate SBOM from Qt build system

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • In Progress
          For Gerrit Dashboard: QTBUG-128893
          # Subject Branch Project Status CR V
          604364,7 CMake: Create separate SBOM documents for QtWebEngine and QtPdf dev qt/qtwebengine Status: NEW +2 0
          609644,5 CMake: Remove SBOM multi-config dead code dev qt/qtbase Status: NEW +2 0
          600557,2 qtpdf: workaround for wrong sbom file dev yocto/meta-qt6 Status: MERGED +2 0
          600677,2 qtpdf: workaround for wrong sbom file 6.8 yocto/meta-qt6 Status: MERGED +2 0
          604363,15 CMake: Support manual multiple projects within-a-repo SBOM generation dev qt/qtbase Status: MERGED +2 0
          609602,2 CMake: Support manual multiple projects within-a-repo SBOM generation 6.8 qt/qtbase Status: MERGED +2 0

          Activity

            People

              alexandru.croitor Alexandru Croitor
              michal Michal Klocek
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:

                Gerrit Reviews