Skip to content

Conversation

@StefanoPetrilli
Copy link
Contributor

@StefanoPetrilli StefanoPetrilli commented Jul 27, 2025

This PR implements the generation of SBOM as request in #1043.

It adds https://github.com/DEMCON/cmake-sbom as a submodule and uses it to create the SBOM file which contains all the dependencies.
To control whether to generate the SBOM or not, a new compilation flag has been added.

@StefanoPetrilli StefanoPetrilli changed the title Adds SBOM Adds SBOM generation using cmake-sbom Jul 27, 2025
@StefanoPetrilli StefanoPetrilli marked this pull request as ready for review July 27, 2025 16:13
@StefanoPetrilli
Copy link
Contributor Author

I set specific dependency versions in the CMake but I noticed that this breaks macos and windows builds. I will need to fix it

@StefanoPetrilli
Copy link
Contributor Author

The PR is now ready for review 😄

Copy link
Member

@gittiver gittiver left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I wanted to request to use cpm instead of a git submodule and there seems to be a small typo.

@gittiver gittiver linked an issue Aug 17, 2025 that may be closed by this pull request
@gittiver gittiver merged commit fd9d24a into CrowCpp:master Aug 17, 2025
13 checks passed
aumuell added a commit to aumuell/Crow that referenced this pull request Aug 22, 2025
This again allows crow to be used as a CMake subproject.
This broke in CrowCpp#1066, as CMAKE_SOURCE_DIR refers to the directory of the
root CMakeLists.txt. And when being used from a toplevel project,
${CMAKE_SOURCE_DIR}/cmake/CPM.cmake would not refer to crow's copy of CPM.
This change makes the reference relative to the location of the
CMakeLists.txt requiring the include.
gittiver pushed a commit that referenced this pull request Aug 24, 2025
This again allows crow to be used as a CMake subproject.
This broke in #1066, as CMAKE_SOURCE_DIR refers to the directory of the
root CMakeLists.txt. And when being used from a toplevel project,
${CMAKE_SOURCE_DIR}/cmake/CPM.cmake would not refer to crow's copy of CPM.
This change makes the reference relative to the location of the
CMakeLists.txt requiring the include.
@StefanoPetrilli StefanoPetrilli deleted the adds-sbom branch August 30, 2025 15:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

SBOM (software bill of materials) for Crow

2 participants