Loading...

XML

Word

Printable

Type: User Story
Resolution: Fixed
Priority: P3: Somewhat important
Fix Version/s: Qt Creator 18.0.0
Affects Version/s: Qt Creator 15.0.0
Component/s: Building Qt Creator
Labels:
- sbom

Epic Link:
SBOM for Qt
Commits:
3b0486c8a (master), 4fe86c648 (master), 4970ecee7 (master), 0772c0058 (master), ee88df631 (master), 235e8d0ce (master), e597077e0 (18.0), cc2ee2c4f (18.0), 685cfe099 (18.0), f64a0addb (18.0)

What is the benefit? Why is this valuable?

Making manual work to create SBOM (Software Bill of Materials) information unnecessary.

What are common use cases?

Licence due diligence and compliancy: Identifying copyright, license information for deliverables (license compliancy).

Configuration management / Cybersecurity: Identifying software components and versions that end up in deliverables.

Technical information

Relevant standards:

SPDX

clones

QTBUG-120586 Create automated SBOM process for Qt framework and tools

In Progress

depends on

QTBUG-129609 Provide a public CMake API for user projects to generate an SBOM

Open

- Issue Only
- Show All Reviews
- Show Open Reviews
- Show All Issues
- Show Open Issues

No reviews matched the request. Check your Options in the drop-down menu of this sections header.

Assignee:: Alexandru Croitor

Reporter:: Alexandru Croitor

Votes:: 0 Vote for this issue

Watchers:: 5 Start watching this issue

Created:: 02 Oct '24 14:01

Updated:: Yesterday 12:26

Resolved:: Yesterday 11:14

There are no open Gerrit changes

Show There are 11 closed Gerrit changes

Hide There are 11 closed Gerrit changes

CMake: Add initial SPDX v2.3 SBOM support for Qt Creator: Gerrit Review:

CMake: Generate an SBOM for the designer plugin project: Gerrit Review:

CMake: Generate an SBOM for the telemetry plugin project: Gerrit Review:

CMake: Annotate attribution json files to targets that use them: Gerrit Review:

CMake: Add resources and other installed files to the SBOM: Gerrit Review:

CMake: Generate an SBOM for the license checker plugin project: Gerrit Review:

CMake: Add SBOM support to projects that can be built standalone: Gerrit Review:

CMake: Use absolute dir attribution file paths: Gerrit Review:

CMake: Install sboms for qtcreatorcdbext and wininterrupt: Gerrit Review:

CMake: Fix SBOM generation for wininterrupt and cdb ext projects: Gerrit Review:

CMake: Generate an SBOM for the vxworks plugin project: Gerrit Review:

Details

Description

Attachments

Issue Links

Gerrit Reviews

Activity

People

Dates

Gerrit Reviews