Uploaded image for project: 'Qt Quality Assurance Infrastructure'
  1. Qt Quality Assurance Infrastructure
  2. QTQAINFRA-6988

Check for existence of source SBOM spdx files in online packages for all repos

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • P2: Important
    • None
    • None
    • RTA
    • None
    • eff9de531 (master), 8a80ed03e (master)

    Description

      The build system is now installing source sbom files into the qt prefix, for repos that are REUSE-compatible.

      RTA should verify the existence of the files in the installed packages, for each repository built.

      Sample file names:
      6.8.1/macos/sbom/qtbase-6.8.1.source.spdx
      6.8.1/macos/sbom/qtdeclarative-6.8.1.source.spdx
      6.8.1/ios/sbom/qt5compat-6.8.1.source.spdx

      etc

      Some repos might not have them yet, but they should all have them in the coming weeks.

      Attachments

        Issue Links

          depends on

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-125211 Generate SBOM for Qt Sources

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • In Progress
          resulted in

          Bug - A problem which impairs or prevents the functions of the product. QTBUG-133970 QtPDF spdx files not included in MinGW content

          • P1: Critical - Urgent and Important, will STOP the release if matched with set FixVersion field. This includes regressions from the last version that are not edge cases; Data loss; Build issues; All but the most unlikely crashes/lockups/hanging; Serious usability issues and embarrassing bugs & Bugs critical to a deliverable. This is the highest possible priority for requirements.
          • Closed
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              joaijala Johanna Äijälä
              alexandru.croitor Alexandru Croitor
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes