Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-136163

sbom/spdx file not reproducible (contains build path)

    XMLWordPrintable

Details

    • Bug
    • Resolution: Unresolved
    • P3: Somewhat important
    • None
    • 6.9.0
    • None

    Description

      Affected to "build system" and "documentation" but unsure where it belongs to.

       

      If I build twice qt but each time from a different location, it will have unreproducible output because the full build path is written in RelationshipComment: field

       

      For example in
      ./usr/lib/i386-linux-gnu/qt-android-6.9-x86/sbom/qtdeclarative-6.9.0.spdx

      Run 1:
      242 RelationshipComment:·/tmp/reprotest.cX0lEL/build-experiment-1/build-experiment-1/debian/build-armeabi-v7a/qtbase/include/QtQml/qtqmlexports.h

      Run 2:
      242 RelationshipComment:·/builds/bastif/qt-android/debian/output/source_dir/debian/build-armeabi-v7a/qtbase/include/QtQml/qtqmlexports.h
       

      Other fields also differ, but likely because the path differ. For example:

      • PackageVerificationCode
      • ExternalDocumentRef

      Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

        Activity

          People

            qtbuildsystem Qt Build System Team
            ban F S
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:

              Gerrit Reviews

                There are no open Gerrit changes