Uploaded image for project: 'Qt Quality Assurance Infrastructure'
  1. Qt Quality Assurance Infrastructure
  2. QTQAINFRA-6988

Check for existence of source SBOM spdx files in online packages for all repos

    XMLWordPrintable

Details

    • Task
    • Resolution: Done
    • P2: Important
    • None
    • None
    • RTA
    • None
    • eff9de531 (master), 8a80ed03e (master)

    Description

      The build system is now installing source sbom files into the qt prefix, for repos that are REUSE-compatible.

      RTA should verify the existence of the files in the installed packages, for each repository built.

      Sample file names:
      6.8.1/macos/sbom/qtbase-6.8.1.source.spdx
      6.8.1/macos/sbom/qtdeclarative-6.8.1.source.spdx
      6.8.1/ios/sbom/qt5compat-6.8.1.source.spdx

      etc

      Some repos might not have them yet, but they should all have them in the coming weeks.

      Attachments

        Issue Links

          depends on

          User Story - Created by Jira Software - do not edit or delete. Issue type for a user story. QTBUG-125211 Generate SBOM for Qt Sources

          • P2: Important - Urgent, should be fixed, but will not stop the release.
          • Closed
          resulted in

          Bug - A problem which impairs or prevents the functions of the product. QTBUG-133970 QtPDF spdx files not included in MinGW content

          • P1: Critical - Urgent and Important, will STOP the release if matched with set FixVersion field. This includes regressions from the last version that are not edge cases; Data loss; Build issues; Flaky tests; All but the most unlikely crashes/lockups/hanging; Serious usability issues and embarrassing bugs & Bugs critical to a deliverable. This is the highest possible priority for requirements.
          • Closed
          For Gerrit Dashboard: QTQAINFRA-6988
          # Subject Branch Project Status CR V
          625652,3 Qt: update SBOM verification, include the .source.spdx file checking master qtqa/tqtc-qt-rta Status: MERGED +2 0
          626265,4 Qt: update SBOM verification master qtqa/tqtc-qt-rta Status: MERGED +2 0

          Activity

            People

              joaijala Johanna Äijälä
              alexandru.croitor Alexandru Croitor
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved:

                Gerrit Reviews

                  There are no open Gerrit changes