Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Windows & Mac compiler version in SBOM not in a unique field #3503

Closed
andrew-m-leonard opened this issue Oct 16, 2023 · 2 comments · Fixed by #3606
Closed

Windows & Mac compiler version in SBOM not in a unique field #3503

andrew-m-leonard opened this issue Oct 16, 2023 · 2 comments · Fixed by #3606
Assignees
Labels
Sbom issue relate to work of sbom

Comments

@andrew-m-leonard
Copy link
Contributor

Currently the SBOM contains a Linux gcc/glibc version field, but there is no similar field for Windows VS C++ and Mac Xcode versions, the values are available from the "Tool Summary" field, subject to some text processing...

@andrew-m-leonard andrew-m-leonard added the Sbom issue relate to work of sbom label Oct 16, 2023
@sxa
Copy link
Member

sxa commented Oct 16, 2023

Thanks for creating this :-)

At the moment I'm having to feed the SBOM through this to pull out the correct compiler name/version from the windows and mac ones:
jq '.components[0].properties[] | select(.name|test("Build Tools Summary")).value' | sed -e 's/^.*Toolchain: //g' -e 's/\*.*//g'

Which gives me output like this (for JDK17):

  • Windows: microsoft (Microsoft Visual Studio 2019)
  • Mac: clang (clang/LLVM from Xcode 10.3)

Once this has been implemented I'll make the corresponding adjustments to the automation in #3484

@sxa
Copy link
Member

sxa commented Oct 16, 2023

Noting that we should have the same fort he Oracle Solaris Studio version on Solaris and XLC on AIX.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Sbom issue relate to work of sbom
Projects
Status: Done
Development

Successfully merging a pull request may close this issue.

3 participants