1berry/qtbase
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

CMake: Allow skipping some parts of SBOM generation

Browse Source 
Makes it easier to debug diffs of SBOMs, due to lower amount of
content in generated files.

Pick-to: 6.8 6.9
Task-number: QTBUG-122899
Change-Id: I5a1e8a9868cda199de4a7344b86a12f68fec31bf
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
This commit is contained in:
Alexandru Croitor 2025-01-10 18:09:07 +01:00
parent 2857d8d5ea
commit 3c516ffa87
1 changed files with 31 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

39
cmake/QtPublicSbomFileHelpers.cmake
View File

@ -29,6 +29,12 @@ function(_qt_internal_sbom_handle_target_binary_files target)
return()
endif()
if(QT_SBOM_SKIP_BINARY_FILES)
message(DEBUG "Skipping sbom target file processing ${target} because "
"QT_SBOM_SKIP_BINARY_FILES is set")
return()
endif()
set(supported_types
QT_MODULE
QT_PLUGIN
@ -265,9 +271,14 @@ function(_qt_internal_sbom_add_binary_file target file_path)
set(relationships "${arg_PACKAGE_SPDX_ID} CONTAINS ${spdx_id}")
# Add source file relationships from which the binary file was generated.
_qt_internal_sbom_add_target_source_files("${target}" "${spdx_id}" source_relationships)
if(source_relationships)
list(APPEND relationships "${source_relationships}")
if(NOT QT_SBOM_SKIP_SOURCE_FILES)
_qt_internal_sbom_add_target_source_files("${target}" "${spdx_id}" source_relationships)
if(source_relationships)
list(APPEND relationships "${source_relationships}")
endif()
else()
message(DEBUG "Skipping sbom source file processing for file '${file_path}' because "
"QT_SBOM_SKIP_SOURCE_FILES is set")
endif()
set(glue "\nRelationship: ")
@ -365,6 +376,12 @@ function(_qt_internal_sbom_handle_target_custom_files target)
return()
endif()
if(QT_SBOM_SKIP_CUSTOM_FILES)
message(DEBUG "Skipping sbom custom file processing ${target} because "
"QT_SBOM_SKIP_BINARY_FILES is set")
return()
endif()
if(NOT arg_PACKAGE_SPDX_ID)
message(FATAL_ERROR "PACKAGE_SPDX_ID must be set")
endif()
@ -639,11 +656,17 @@ function(_qt_internal_sbom_add_custom_file target installed_file_relative_path)
set(sources_option SOURCES ${arg_SOURCE_FILES})
endif()
_qt_internal_sbom_add_source_files(
${sources_option}
SPDX_ID "${spdx_id}"
OUT_RELATIONSHIPS_VAR source_relationships
)
# Add source file relationships from which the binary file was generated.
if(NOT QT_SBOM_SKIP_SOURCE_FILES)
_qt_internal_sbom_add_source_files(
${sources_option}
SPDX_ID "${spdx_id}"
OUT_RELATIONSHIPS_VAR source_relationships
)
else()
message(DEBUG "Skipping sbom source file processing for file "
"'${installed_file_relative_path}' because QT_SBOM_SKIP_SOURCE_FILES is set")
endif()
if(source_relationships)
list(APPEND relationships "${source_relationships}")