C
Software Bill of Materials
A Software Bill of Materials (SBOM) document is a declaration of installed files, copyrights, licenses, versions, source repositories, and other relevant information about a Qt for MCUs installation. The SBOM documents facilitate supply chain management by sharing component information to users and other interested parties. The SBOM documents are especially useful for license compliance and security vulnerability management.
Warning: The currently delivered SBOM files are incomplete and only be used as a preliminary preview.
The Qt Online Installer places the SBOM documents in an sbom directory located in the installation directory of the respective Qt for MCUs version. For example, for the Qt Quick Ultralite 3.0.0, the SBOM documents are at:
<INSTALL_DIR>QtMCUs/3.0.0/sbom/SPDX Format
The SBOM documents are in SPDX 2.3 format. A document begins with information about the Qt for MCUs module. SPDX packages follow as separate entries.
The SBOM is structured into compontents on each platform so that consumers of the data can choose specific components to use in their CRA management tools.
Related Topics
Available under certain Qt licenses.
Find out more.
