From heiko.nardmann at itechnical.de Wed Sep 2 15:15:13 2026 From: heiko.nardmann at itechnical.de (Heiko Nardmann) Date: Wed, 2 Sep 2026 15:15:13 +0200 Subject: [Qbs] SBOM generation? Message-ID: <98d7b5de-340a-4d2e-8cba-b04f7b7aedc3@itechnical.de> Hi together, today I've been wondering whether it would make sense resp. would be possible to have some SBOM generator within Qbs. Any opinions? /Kind regards,/ ? Heiko -------------- next part -------------- An HTML attachment was scrubbed... URL: From christian.kandeler at qt.io Wed Sep 2 15:34:50 2026 From: christian.kandeler at qt.io (Christian Kandeler) Date: Wed, 2 Sep 2026 15:34:50 +0200 Subject: [Qbs] SBOM generation? In-Reply-To: <98d7b5de-340a-4d2e-8cba-b04f7b7aedc3@itechnical.de> References: <98d7b5de-340a-4d2e-8cba-b04f7b7aedc3@itechnical.de> Message-ID: <34ea3749-3853-4b93-be34-79e23eedf232@qt.io> On 9/2/26 3:15 PM, Heiko Nardmann wrote: > today I've been wondering whether it would make sense resp. would be > possible to have some SBOM generator within Qbs. Why don't you try writing such a module? Not sure how easy it is to classify the components: External dependencies might be detectable via e.g. cpp.*libraries, and perhaps one could also find git submodules, but what about copied code? Rely on "3rdparty" directory names or manual tagging? Anyway, sounds like a lot of "fun". Christian