Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-129609

Provide a public CMake API for user projects to generate an SBOM

    XMLWordPrintable

Details

    • User Story
    • Resolution: Unresolved
    • P2: Important
    • None
    • None
    • Build System: CMake
    • None

    Description

      The CMake implementation that Qt uses to generate its SBOM could be retrofitted to offer a public CMake API for user projects to generate their own SBOM.

      It will require some internal refactorings to achieve that.

      The implementation should ideally also support detecting and referencing Qt's own SBOM documents, so that the project SBOM can have a list of Qt module dependencies, etc.

      This would also have to tie into deployment somehow, to deploy both the project SBOM and the Qt SBOM documents.

      Attachments

        Issue Links

          is required for

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-129601 Provide custom SBOM's in deployment tooling

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • Open

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTCREATORBUG-31681 Create automated SBOM process for Qt Creator

          • P3: Somewhat important - Should be fixed, but doesn't affect the release in any way.
          • In Progress
          relates to

          Task - A task that needs to be done. QTBUG-134894 Various improvements for SBOM generation

          • P3: Somewhat important - Should be fixed, but doesn't affect the release in any way.
          • Reported
          split from

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-122899 Generate SBOM from Qt build system

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • Closed
          For Gerrit Dashboard: QTBUG-129609
          # Subject Branch Project Status CR V
          615674,58 WIP: CMake: Generate an SPDX v2.3 SBOM for Qt Creator master qt-creator/qt-creator Status: NEW -2 0
          632233,7 WIP: CMake: Preliminary support for SBOM generation qds/dev qt-creator/tqtc-plugin-qtquickdesigner Status: NEW -2 0
          632235,7 WIP: CMake: Preliminary support for SBOM generation qds/dev qt-creator/plugin-telemetry Status: NEW -2 0
          632283,8 WIP: CMake: Annotate attribution json files to targets that use them master qt-creator/qt-creator Status: NEW -2 -1
          632287,9 WIP: CMake: Add resources and other files to the SBOM master qt-creator/qt-creator Status: NEW -2 0

          Activity

            People

              alexandru.croitor Alexandru Croitor
              alexandru.croitor Alexandru Croitor
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated: