CMake & CPS


The company where I work will have to produce SBOM for its software. I discoved the CPS initiative.

Is it already possible to use it with CMake in order to produce the SBOM by some other tool ?

Not that I’m aware of.

I’m not sure how you intended to use CPS for creating an SBOM, but there are 3rd party projects that help with creating an SBOM.

Qt, which uses CMake, also recently added support for generating an SBOM. You could use it as inspiration, but it was based on the approach in DEMCON/cmake-sbom

Well, it appears that CPS could contain the minimal info to create the SBOM. So it should be possible with some scripting.

Thanks ! They’re will be useful until CPS is specified and implemented.