CMake: Add PURL and CPE info to 3rd party attribution files

[ChangeLog][Third-Party Code] Added PURL and CPE information to the
attribution files of 3rd party sources.

Pick-to: 6.9 6.8 6.5
Fixes: QTBUG-137264
Task-number: QTBUG-129602
Change-Id: Ied50c009c8208ab576e5432586c99cb0e8ba84b4
Reviewed-by: Joerg Bornemann <joerg.bornemann@qt.io>
(cherry picked from commit bd86e2f91b)
Reviewed-by: Qt Cherry-pick Bot <cherrypick_bot@qt-project.org>
This commit is contained in:
Alexandru Croitor 2025-05-28 19:03:21 +02:00 committed by Qt Cherry-pick Bot
parent 5f1ed8da0e
commit 331c681fe0
1 changed files with 11 additions and 2 deletions

View File

@ -12,7 +12,11 @@
"LicenseId": "BSD-3-Clause",
"LicenseFile": "LICENSES/LicenseRef-protobuf.txt",
"Copyright": "Copyright 2008 Google Inc.",
"Version": "21.9"
"Version": "21.9",
"PURL": [
"pkg:github/protocolbuffers/protobuf@v$<VERSION>"
],
"CPE": "cpe:2.3:a:google:protobuf:$<VERSION>:*:*:*:*:*:*:*"
},
{
"Id": "protobuf-qtgrpcgen",
@ -27,7 +31,11 @@
"LicenseId": "BSD-3-Clause",
"LicenseFile": "LICENSES/LicenseRef-protobuf.txt",
"Copyright": "Copyright 2008 Google Inc.",
"Version": "21.9"
"Version": "21.9",
"PURL": [
"pkg:github/protocolbuffers/protobuf@v$<VERSION>"
],
"CPE": "cpe:2.3:a:google:protobuf:$<VERSION>:*:*:*:*:*:*:*"
},
{
"Id": "grpc",
@ -38,6 +46,7 @@
"SecurityCritical": false,
"Homepage": "https://grpc.io",
"Comment": "no relevant PURL or CPE set, because the dependency is just for examples and tests",
"License": "Apache License 2.0",
"LicenseId": "Apache-2.0",
"LicenseFile": "LICENSE.Apache-2.0.txt",