Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-129609

Provide a public CMake API for user projects to generate an SBOM

    XMLWordPrintable

Details

    • User Story
    • Resolution: Unresolved
    • P2: Important
    • None
    • None
    • Build System: CMake
    • None

    Description

      The CMake implementation that Qt uses to generate its SBOM could be retrofitted to offer a public CMake API for user projects to generate their own SBOM.

      It will require some internal refactorings to achieve that.

      The implementation should ideally also support detecting and referencing Qt's own SBOM documents, so that the project SBOM can have a list of Qt module dependencies, etc.

      This would also have to tie into deployment somehow, to deploy both the project SBOM and the Qt SBOM documents.

      Attachments

        Issue Links

          is required for

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-129601 Provide custom SBOM's in deployment tooling

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • Open

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTCREATORBUG-31681 Create automated SBOM process for Qt Creator

          • P3: Somewhat important - Should be fixed, but doesn't affect the release in any way.
          • Open
          split from

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-122899 Generate SBOM from Qt build system

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • In Progress
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              qtbuildsystem Qt Build System Team
              alexandru.croitor Alexandru Croitor
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:

                Gerrit Reviews

                  There are no open Gerrit changes