CMake: Add PURL and CPE info to 3rd party attribution filesHEADdev

[ChangeLog][Third-Party Code] Added PURL and CPE information to the
attribution files of 3rd party sources.

Pick-to: 6.5 6.8 6.9 6.10
Fixes: QTBUG-137389
Task-number: QTBUG-129602
Change-Id: I9e98e649b482b7fd41c997730f48304f2b13b76d
Reviewed-by: Joerg Bornemann <[email protected]>

5 files changed, 18 insertions, 0 deletions

diff --git a/src/3rdparty/libarchive/qt_attribution.json b/src/3rdparty/libarchive/qt_attribution.json
index c6a4b9dd..31a96ac2 100644
--- a/src/3rdparty/libarchive/qt_attribution.json
+++ b/src/3rdparty/libarchive/qt_attribution.json
@@ -9,6 +9,10 @@
     "Homepage": "https://www.libarchive.org/",
     "Version": "3.7.2",
     "DownloadLocation": "https://github.com/libarchive/libarchive/releases/download/v3.7.2/libarchive-3.7.2.tar.xz",
+    "PURL": [
+        "pkg:github/libarchive/libarchive@v$<VERSION>"
+    ],
+    "CPE": "cpe:2.3:a:libarchive:libarchive:$<VERSION>:*:*:*:*:*:*:*",
 
     "License": "BSD 2-clause \"Simplified\" License",
     "LicenseId": "BSD-2-Clause",
diff --git a/src/3rdparty/libbacktrace/qt_attribution.json b/src/3rdparty/libbacktrace/qt_attribution.json
index 2030c593..6907f9b9 100644
--- a/src/3rdparty/libbacktrace/qt_attribution.json
+++ b/src/3rdparty/libbacktrace/qt_attribution.json
@@ -7,6 +7,10 @@
     "Description": "A C library that may be linked into a C/C++ program to produce symbolic backtraces.",
     "Homepage": "https://github.com/ianlancetaylor/libbacktrace",
     "Version": "2022-07-09",
+    "PURL": [
+        "pkg:github/ianlancetaylor/libbacktrace@8602fda64e78f1f46563220f2ee9f7e70819c51d"
+    ],
+    "Comment": "No relevant CPE found",
 
     "License": "BSD 3-clause \"New\" or \"Revised\" License",
     "LicenseId": "BSD-3-Clause",
diff --git a/src/3rdparty/libdbus/qt_attribution.json b/src/3rdparty/libdbus/qt_attribution.json
index 177cd271..1cc28a06 100644
--- a/src/3rdparty/libdbus/qt_attribution.json
+++ b/src/3rdparty/libdbus/qt_attribution.json
@@ -9,6 +9,8 @@
     "Homepage": "https://www.freedesktop.org/wiki/Software/dbus/",
     "Version": "1.15.9",
     "DownloadLocation": "https://dbus.freedesktop.org/releases/dbus/dbus-1.15.9.tar.gz",
+    "PURL": "pkg:github/d-bus/dbus@dbus-$<VERSION>",
+    "Comment": "No relevant CPE found",
 
     "License": "Academic Free License v2.1, or GNU General Public License v2.0 or later",
     "LicenseId": "AFL-2.1 OR GPL-2.0-or-later",
diff --git a/src/3rdparty/libyaml/qt_attribution.json b/src/3rdparty/libyaml/qt_attribution.json
index f9a8e637..9bdb23e4 100644
--- a/src/3rdparty/libyaml/qt_attribution.json
+++ b/src/3rdparty/libyaml/qt_attribution.json
@@ -9,6 +9,10 @@
     "Homepage": "https://github.com/yaml/libyaml",
     "Version": "0.2.5",
     "DownloadLocation": "https://github.com/yaml/libyaml/releases/download/0.2.5/yaml-0.2.5.tar.gz",
+    "PURL": [
+        "pkg:github/yaml/libyaml@$<VERSION>"
+    ],
+    "CPE": "cpe:2.3:a:pyyaml:libyaml:$<VERSION>:*:*:*:*:*:*:*",
 
     "License": "MIT License",
     "LicenseId": "MIT",
diff --git a/src/3rdparty/stackwalker/qt_attribution.json b/src/3rdparty/stackwalker/qt_attribution.json
index f8373f9b..305073b4 100644
--- a/src/3rdparty/stackwalker/qt_attribution.json
+++ b/src/3rdparty/stackwalker/qt_attribution.json
@@ -7,6 +7,10 @@
     "Description": "Walking the callstack in windows applications.",
     "Homepage": "https://github.com/JochenKalmbach/StackWalker",
     "Version": "2020-02-06",
+    "PURL": [
+        "pkg:github/JochenKalmbach/StackWalker@8ca119caf70a574f55810be3fc5bc1672b29447b"
+    ],
+    "Comment": "No relevant CPE found",
 
     "License": "BSD 2-clause \"Simplified\" License",
     "LicenseId": "BSD-2-Clause",