From 331c681fe0d6698bbb1564dce7af7f0166e72771 Mon Sep 17 00:00:00 2001 From: Alexandru Croitor Date: Wed, 28 May 2025 19:03:21 +0200 Subject: [PATCH] CMake: Add PURL and CPE info to 3rd party attribution files [ChangeLog][Third-Party Code] Added PURL and CPE information to the attribution files of 3rd party sources. Pick-to: 6.9 6.8 6.5 Fixes: QTBUG-137264 Task-number: QTBUG-129602 Change-Id: Ied50c009c8208ab576e5432586c99cb0e8ba84b4 Reviewed-by: Joerg Bornemann (cherry picked from commit bd86e2f91b829a69aa1f8808753c4fc70ff060d2) Reviewed-by: Qt Cherry-pick Bot --- qt_attribution.json | 13 +++++++++++-- 1 file changed, 11 insertions(+), 2 deletions(-) diff --git a/qt_attribution.json b/qt_attribution.json index 50f2148a..facf4971 100644 --- a/qt_attribution.json +++ b/qt_attribution.json @@ -12,7 +12,11 @@ "LicenseId": "BSD-3-Clause", "LicenseFile": "LICENSES/LicenseRef-protobuf.txt", "Copyright": "Copyright 2008 Google Inc.", - "Version": "21.9" + "Version": "21.9", + "PURL": [ + "pkg:github/protocolbuffers/protobuf@v$" + ], + "CPE": "cpe:2.3:a:google:protobuf:$:*:*:*:*:*:*:*" }, { "Id": "protobuf-qtgrpcgen", @@ -27,7 +31,11 @@ "LicenseId": "BSD-3-Clause", "LicenseFile": "LICENSES/LicenseRef-protobuf.txt", "Copyright": "Copyright 2008 Google Inc.", - "Version": "21.9" + "Version": "21.9", + "PURL": [ + "pkg:github/protocolbuffers/protobuf@v$" + ], + "CPE": "cpe:2.3:a:google:protobuf:$:*:*:*:*:*:*:*" }, { "Id": "grpc", @@ -38,6 +46,7 @@ "SecurityCritical": false, "Homepage": "https://grpc.io", + "Comment": "no relevant PURL or CPE set, because the dependency is just for examples and tests", "License": "Apache License 2.0", "LicenseId": "Apache-2.0", "LicenseFile": "LICENSE.Apache-2.0.txt",