From b73f9def981d11c7f5d1718cf899442ffa364452 Mon Sep 17 00:00:00 2001
From: Alexandru Croitor <alexandru.croitor@qt.io>
Date: Fri, 10 Jan 2025 18:09:07 +0100
Subject: [PATCH] CMake: Allow skipping some parts of SBOM generation

Makes it easier to debug diffs of SBOMs, due to lower amount of
content in generated files.

Task-number: QTBUG-122899
Change-Id: I5a1e8a9868cda199de4a7344b86a12f68fec31bf
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
(cherry picked from commit 3c516ffa8739a6d8729780138f07a6bea7cfea8c)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
(cherry picked from commit 940fc15ec117588efb0d0ce903a12346bb8e9656)
---
 cmake/QtPublicSbomFileHelpers.cmake | 39 +++++++++++++++++++++++------
 1 file changed, 31 insertions(+), 8 deletions(-)

diff --git a/cmake/QtPublicSbomFileHelpers.cmake b/cmake/QtPublicSbomFileHelpers.cmake
index afd40c633b0..746dbfad486 100644
--- a/cmake/QtPublicSbomFileHelpers.cmake
+++ b/cmake/QtPublicSbomFileHelpers.cmake
@@ -29,6 +29,12 @@ function(_qt_internal_sbom_handle_target_binary_files target)
         return()
     endif()
 
+    if(QT_SBOM_SKIP_BINARY_FILES)
+        message(DEBUG "Skipping sbom target file processing ${target} because "
+            "QT_SBOM_SKIP_BINARY_FILES is set")
+        return()
+    endif()
+
     set(supported_types
         QT_MODULE
         QT_PLUGIN
@@ -265,9 +271,14 @@ function(_qt_internal_sbom_add_binary_file target file_path)
     set(relationships "${arg_PACKAGE_SPDX_ID} CONTAINS ${spdx_id}")
 
     # Add source file relationships from which the binary file was generated.
-    _qt_internal_sbom_add_target_source_files("${target}" "${spdx_id}" source_relationships)
-    if(source_relationships)
-        list(APPEND relationships "${source_relationships}")
+    if(NOT QT_SBOM_SKIP_SOURCE_FILES)
+        _qt_internal_sbom_add_target_source_files("${target}" "${spdx_id}" source_relationships)
+        if(source_relationships)
+            list(APPEND relationships "${source_relationships}")
+        endif()
+    else()
+        message(DEBUG "Skipping sbom source file processing for file '${file_path}' because "
+            "QT_SBOM_SKIP_SOURCE_FILES is set")
     endif()
 
     set(glue "\nRelationship: ")
@@ -365,6 +376,12 @@ function(_qt_internal_sbom_handle_target_custom_files target)
         return()
     endif()
 
+    if(QT_SBOM_SKIP_CUSTOM_FILES)
+        message(DEBUG "Skipping sbom custom file processing ${target} because "
+            "QT_SBOM_SKIP_BINARY_FILES is set")
+        return()
+    endif()
+
     if(NOT arg_PACKAGE_SPDX_ID)
         message(FATAL_ERROR "PACKAGE_SPDX_ID must be set")
     endif()
@@ -639,11 +656,17 @@ function(_qt_internal_sbom_add_custom_file target installed_file_relative_path)
         set(sources_option SOURCES ${arg_SOURCE_FILES})
     endif()
 
-    _qt_internal_sbom_add_source_files(
-        ${sources_option}
-        SPDX_ID "${spdx_id}"
-        OUT_RELATIONSHIPS_VAR source_relationships
-    )
+    # Add source file relationships from which the binary file was generated.
+    if(NOT QT_SBOM_SKIP_SOURCE_FILES)
+        _qt_internal_sbom_add_source_files(
+            ${sources_option}
+            SPDX_ID "${spdx_id}"
+            OUT_RELATIONSHIPS_VAR source_relationships
+        )
+    else()
+        message(DEBUG "Skipping sbom source file processing for file "
+            "'${installed_file_relative_path}' because QT_SBOM_SKIP_SOURCE_FILES is set")
+    endif()
 
     if(source_relationships)
         list(APPEND relationships "${source_relationships}")