tree 4e12cb25356c716d316221b92a0b013594d31fb9
parent 403892b915e8efe0c0172bcf49012301ff518491
author Sergiu Deitsch <sergiu.deitsch@gmail.com> 1791408464 +0200
committer Sergiu Deitsch <sergiu.deitsch@gmail.com> 1791411683 +0200
gpgsig -----BEGIN SSH SIGNATURE-----
 U1NIU0lHAAAAAQAAADMAAAALc3NoLWVkMjU1MTkAAAAg3vg8qwvHVhPBrnx4YDqFxqFP3d
 j6luLZ1zAM1x55LLkAAAADZ2l0AAAAAAAAAAZzaGE1MTIAAABTAAAAC3NzaC1lZDI1NTE5
 AAAAQMQzScRu2FKnm2cOvptnaStEby+pp2W4zqmiAl4H5lrJXCuOdR8QlAPUGmOoxSthLd
 q2eTHgwJgdolacY75jOAw=
 -----END SSH SIGNATURE-----

Install a software bill of materials

The license obligations of a Ceres build depend on the optional
dependencies it links against. Notices in the license file or in the
configuration output have been suggested to convey these obligations,
but such notices cannot be processed by license compliance tooling. A
software bill of materials in the standard SPDX format is the
established means for this purpose.

Install an SPDX SBOM describing the package, its license and the linked
libraries when CMake supports it. SBOM generation rejects generator
expressions in link libraries, so the Abseil linkage is resolved at
configure time and the SBOM is skipped if a static Abseil still requires
one.

Change-Id: Idf175a1d75f2cba4921461dd6efddc02e1b70b1f