cmake: require version variable for external deps

Author: asaezper

CMakeLists.txt

@@ -285,7 +285,6 @@ sbom_generate(
     DOWNLOAD_URL "https://github.com/srsran/srsRAN_Project.git"
     LICENSE      "LicenseRef-srsRAN"
 )
-parse_copyright_file("${CMAKE_SOURCE_DIR}/COPYRIGHT")
 
 ########################################################################
 # Find dependencies
@@ -645,6 +644,7 @@ message(STATUS "Building srsRAN version ${SRSRAN_VERSION_STRING}")
 ########################################################################
 # Generate SBOM
 ########################################################################
+parse_copyright_file("${CMAKE_SOURCE_DIR}/COPYRIGHT")
 sbom_add(
     LICENSE "LicenseRef-srsRAN"
     NAME    "AGPL-3.0-only"

cmake/modules/copyright.cmake

@@ -41,12 +41,20 @@ function(parse_copyright_file FILE)
         "${_copy_str}"
       )
 
+      # Version
+      string(TOUPPER "${_module_name}" _upper)
+      set(_var "SBOM_${_upper}_VERSION")
+      if(NOT DEFINED ${_var})
+        message(FATAL_ERROR "Required variable `${_var}` is not defined. ")
+      endif()
+      set(_version "${${_var}}")
+
       # Add to SBOM
-      message(STATUS "Adding external module: ${_module_name} with license: ${_license_str} supplier: ${_copy_clean} and version: ${_version}")
       sbom_add(
         PACKAGE "${_module_name}"
         SUPPLIER "${_copy_clean}"
         LICENSE "${_license_str}"
+        VERSION "${_version}"
       )
     endif()
   endforeach()

external/CMakeLists.txt

@@ -8,3 +8,12 @@
 
 add_subdirectory(fmt)
 add_subdirectory(uWebSockets)
+
+set(SBOM_BACKWARD_VERSION "UNKNOWN" CACHE STRING "SBOM version for BACKWARD")
+set(SBOM_CLI11_VERSION "2.4.2" CACHE STRING "SBOM version for CLI11")
+set(SBOM_MPMCQUEUE_VERSION "UNKNOWN" CACHE STRING "SBOM version for MPMCQUEUE")
+set(SBOM_SPSCQUEUE_VERSION "UNKNOWN" CACHE STRING "SBOM version for SPSCQUEUE")
+set(SBOM_CONCURRENTQUEUE_VERSION "UNKNOWN" CACHE STRING "SBOM version for CONCURRENTQUEUE")
+set(SBOM_EXPECTED_VERSION "1.1" CACHE STRING "SBOM version for EXPECTED")
+set(SBOM_NLOHMANN_VERSION "3.12.0" CACHE STRING "SBOM version for NLOHMANN")
+set(SBOM_SBOM_VERSION "1.3.0" CACHE STRING "SBOM version for SBOM")

external/fmt/CMakeLists.txt

@@ -14,3 +14,5 @@ add_library(fmt STATIC ${SOURCES})
 target_link_libraries(fmt ${CMAKE_THREAD_LIBS_INIT})
 
 add_to_exported_libs(fmt)
+
+set(SBOM_FMT_VERSION "11.1.2" CACHE STRING "SBOM version for FMT")

external/uWebSockets/CMakeLists.txt

@@ -7,3 +7,5 @@
 #
 
 add_subdirectory(uSockets)
+
+set(SBOM_UWEBSOCKETS_VERSION "20.71.0" CACHE STRING "SBOM version for UWEBSOCKETS")