Details
-
Bug
-
Resolution: Fixed
-
P3: Somewhat important
-
6.9.0
-
e23afb606 (dev), 8c77fe04d (6.10), ed327e4f4 (6.9), 0a30dcafb (tqtc/lts-6.8)
Description
Affected to "build system" and "documentation" but unsure where it belongs to.
If I build twice qt but each time from a different location, it will have unreproducible output because the full build path is written in RelationshipComment: field
For example in
./usr/lib/i386-linux-gnu/qt-android-6.9-x86/sbom/qtdeclarative-6.9.0.spdx
Run 1:
242 RelationshipComment:·/tmp/reprotest.cX0lEL/build-experiment-1/build-experiment-1/debian/build-armeabi-v7a/qtbase/include/QtQml/qtqmlexports.h
Run 2:
242 RelationshipComment:·/builds/bastif/qt-android/debian/output/source_dir/debian/build-armeabi-v7a/qtbase/include/QtQml/qtqmlexports.h
Other fields also differ, but likely because the path differ. For example:
- PackageVerificationCode
- ExternalDocumentRef
Attachments
| For Gerrit Dashboard: QTBUG-136163 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 663274,2 | CMake: Map paths of SBOM source files in the install prefix | dev | qt/qtbase | Status: MERGED | +2 | +1 |
| 663557,2 | CMake: Map paths of SBOM source files in the install prefix | 6.10 | qt/qtbase | Status: MERGED | +2 | 0 |
| 663712,2 | CMake: Map paths of SBOM source files in the install prefix | 6.9 | qt/qtbase | Status: MERGED | +2 | 0 |
| 663778,2 | CMake: Map paths of SBOM source files in the install prefix | tqtc/lts-6.8 | qt/tqtc-qtbase | Status: MERGED | +2 | 0 |