Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-141165

SBOM: Provide pkg:generic PURL's

XMLWordPrintable

    • Icon: User Story User Story
    • Resolution: Unresolved
    • Icon: P3: Somewhat important P3: Somewhat important
    • None
    • 6.10.0
    • Build System: CMake
    • None

      Consider providing also pkg:generic PURL's for third-party code. E.g.:

                 ....
            "externalRefs": [
                {
                    "referenceCategory": "PACKAGE_MANAGER",
                    "referenceLocator": "pkg:generic/freetype/freetype@2.14.1",
                    "referenceType": "purl"
                }

      will help scanners like snyk.

        For Gerrit Dashboard: QTBUG-141165
        # Subject Branch Project Status CR V
        684959,2 SBOM: Add pkg:generic identifiers where applicable dev qt/qtbase Status: NEW 0 0

            qtbuildsystem Qt Build System Team
            kkohne Kai Köhne
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:

                There is 1 open Gerrit change