-
User Story
-
Resolution: Unresolved
-
P2: Important
-
None
-
None
-
3b0486c8a (master), 4fe86c648 (master), 4970ecee7 (master), 0772c0058 (master)
The CMake implementation that Qt uses to generate its SBOM could be retrofitted to offer a public CMake API for user projects to generate their own SBOM.
It will require some internal refactorings to achieve that.
The implementation should ideally also support detecting and referencing Qt's own SBOM documents, so that the project SBOM can have a list of Qt module dependencies, etc.
This would also have to tie into deployment somehow, to deploy both the project SBOM and the Qt SBOM documents.
- is required for
-
QTBUG-129601
Provide custom SBOM's in deployment tooling
-
- Open
-
-
QTCREATORBUG-31681
Create automated SBOM process for Qt Creator
-
- In Progress
-
- relates to
-
QTBUG-134894 Various improvements for SBOM generation
-
- Reported
-
- split from
-
QTBUG-122899
Generate SBOM from Qt build system
-
- Closed
-
| For Gerrit Dashboard: QTBUG-129609 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 632233,9 | CMake: Generate an SBOM for the designer plugin project | master | qt-creator/tqtc-plugin-qtquickdesigner | Status: NEW | 0 | 0 |
| 632235,12 | CMake: Generate an SBOM for the telemetry plugin project | master | qt-creator/plugin-telemetry | Status: NEW | 0 | 0 |
| 615674,94 | CMake: Add initial SPDX v2.3 SBOM support for Qt Creator | master | qt-creator/qt-creator | Status: MERGED | +2 | +1 |
| 632283,31 | CMake: Annotate attribution json files to targets that use them | master | qt-creator/qt-creator | Status: MERGED | +2 | 0 |
| 632287,34 | CMake: Add resources and other installed files to the SBOM | master | qt-creator/qt-creator | Status: MERGED | +2 | 0 |
| 657325,17 | CMake: Add SBOM support to projects that can be built standalone | master | qt-creator/qt-creator | Status: MERGED | +2 | +1 |