-
User Story
-
Resolution: Fixed
-
P3: Somewhat important
-
Qt Creator 15.0.0
-
3b0486c8a (master), 4fe86c648 (master), 4970ecee7 (master), 0772c0058 (master), ee88df631 (master), 235e8d0ce (master), e597077e0 (18.0), cc2ee2c4f (18.0), 685cfe099 (18.0), f64a0addb (18.0)
What is the benefit? Why is this valuable?
Making manual work to create SBOM (Software Bill of Materials) information unnecessary.
What are common use cases?
Licence due diligence and compliancy: Identifying copyright, license information for deliverables (license compliancy).
Configuration management / Cybersecurity: Identifying software components and versions that end up in deliverables.
Technical information
Relevant standards:
- SPDX
- clones
-
QTBUG-120586
Create automated SBOM process for Qt framework and tools
-
- In Progress
-
- depends on
-
QTBUG-129609
Provide a public CMake API for user projects to generate an SBOM
-
- Open
-
| For Gerrit Dashboard: QTCREATORBUG-31681 | ||||||
|---|---|---|---|---|---|---|
| # | Subject | Branch | Project | Status | CR | V |
| 615674,94 | CMake: Add initial SPDX v2.3 SBOM support for Qt Creator | master | qt-creator/qt-creator | Status: MERGED | +2 | +1 |
| 632233,14 | CMake: Generate an SBOM for the designer plugin project | 18.0 | qt-creator/tqtc-plugin-qtquickdesigner | Status: MERGED | +2 | 0 |
| 632235,19 | CMake: Generate an SBOM for the telemetry plugin project | 18.0 | qt-creator/plugin-telemetry | Status: MERGED | +2 | 0 |
| 632283,31 | CMake: Annotate attribution json files to targets that use them | master | qt-creator/qt-creator | Status: MERGED | +2 | 0 |
| 632287,34 | CMake: Add resources and other installed files to the SBOM | master | qt-creator/qt-creator | Status: MERGED | +2 | 0 |
| 632643,12 | CMake: Generate an SBOM for the license checker plugin project | 18.0 | qt-creator/tqtc-plugin-licensechecker | Status: MERGED | +2 | 0 |
| 657325,17 | CMake: Add SBOM support to projects that can be built standalone | master | qt-creator/qt-creator | Status: MERGED | +2 | +1 |
| 662812,8 | CMake: Use absolute dir attribution file paths | master | qt-creator/qt-creator | Status: MERGED | +2 | -1 |
| 662909,14 | CMake: Install sboms for qtcreatorcdbext and wininterrupt | master | qt-creator/qt-creator | Status: ABANDONED | 0 | 0 |
| 663742,8 | CMake: Fix SBOM generation for wininterrupt and cdb ext projects | master | qt-creator/qt-creator | Status: MERGED | +2 | +1 |
| 674129,5 | CMake: Generate an SBOM for the vxworks plugin project | 18.0 | qt-creator/tqtc-plugin-vxworks | Status: MERGED | +2 | 0 |