bugmake - Bugs: bug #64591, SBOM-friendly CMake-like File API...


bug #64591: SBOM-friendly CMake-like File API for GNU Make

Submitter:  David Edelsohn <edelsohn>
Submitted:  Thu 24 Aug 2023 05:11:49 PM UTC
Severity:  3 - Normal Item Group:  Enhancement
Status:  None Privacy:  Public
Assigned to:  None Open/Closed:  Open
Component Version:  SCM Operating System:  None
Fixed Release:  None Triage Status:  None
* Mandatory Fields

Add a New Comment Rich Markup

Thu 24 Aug 2023 05:11:49 PM UTC, original submission:  

cmake-spdx (https://github.com/swinslow/cmake-spdx) utilizes CMake File API (https://cmake.org/cmake/help/latest/manual/cmake-file-api.7.html) to query, observe, and parse information about the build process to allow the tool to create an SPDX SBOM file. While CMake could be unaware of some dependencies and files, and is not a perfect solution, it is a step toward SBOM compliance that many software packages will utilize. GNU Make should provide an API with similar functionality to CMake File API, which would allow tools to generate manifests such as SPDX SBOM. This will allow better and easier visibility into the licenses used by packages built by GNU Make.

David Edelsohn <edelsohn>


(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by edelsohn (Submitted the item)

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.


    No changes have been made to this item

    Back to the top

    Powered by Savane 3.12.
    Corresponding source code