-
Suggestion
-
Resolution: Unresolved
-
P2: Important
-
None
-
6.10.0
Generated SBOM files are provided per repository (e.g., qtbase, qtdeclarative, qtwebengine, qtmultimedia, etc.).
For users who want to include the correct SBOMs with their application, there is currently no documentation explaining which SBOM corresponds to which modules. Users only know the modules they include in find_package, so it would be very helpful to provide a table that shows what modules belong to each repository, or what modules are covered by each SBOM.
Even better would be having something like a qt_add_sbom() CMake helper that can detect the modules used by a target and automatically copy the appropriate SBOM files into the application