dependencies Solution 8: Produce a Software Bill of Materials (SBOM) •Organize and list 3rd party dependencies as individual, named packages •Produce Software Bill of Materials (SBOMs) •Two common formats: SPDX SPDX and CycloneDXA Software Bill of Materials (SBOM) is a formal record containing the details and supply chain relationships of various components used in building software. These components, including

needs to be verified! • Software Bill of Materials (SBOM) o Vulnerability management o Compliance and reporting o Supply chain transparency • Cybersecurity Bill of Materials (CBOM) o SBOM + Cybersecurity

First Step Toward Standard C++ Dependency Management Bret Brown, C++ Infrastructure Lead, Bloomberg Bill Hoffman, CTO, KitwareHello! Welcome! Bret Brown C++ Infrastructure Lead, Bloomberg mail@bretbrownjr com/bretbrownjr https://gitlab.kitware.com/bbrown105 Bill Hoffman CTO, Kitware bill.hoffman@kitware.org https://github.com/billhoffman https://gitlab.kitware.com/bill-hoffman 3Goals 4Non-goals (so far) ● Package survive a C++ modules transition ○ Cannot declare dependencies anyway! 36CPS and software bills of materials (SBOM) ● SBOM is a hot topic ○ Ensuring software transparency ○ Managing open-source software

Bill Hoffman, CTO @ Kitware creator of CMake 1 import CMake; // Mastering C++ Modules2 _____________________ GUY CMake / Sandal / Kitware Bill Hoffman3 About Me • 1990-1999 GE research in a Computer d-libraries/ 75Special Thanks Bret Brown Daniel Ruoso Ben Boeckel Chuanqi Xu 76Thank You • bill.hoffman@kitware.com • Read “how to write a CMake buildsystem” – https://cmake.org/cmake/help/la

Bound 的时候， Ninja 的速度提升就很明 显。 然而某些专利公司的 CUDA toolkit 在 Windows 上只允许用 MSBuild 构建，不能 用 Ninja （怕不是和 Bill Gates 有什么交 易） 第 1 章：添加源文件 一个 .cpp 源文件用于测试 CMake 中添加一个可执行文件作为构建目标 另一种方式：先创建目标，稍后再添加源文件 如果有多个源文件呢？ html#genex:PLATFORM_ID 语法： $<$< 类型 : 值 >: 为真时的表达式 > 比如 $<$:MY_NAME=”Bill Gates”> 在 Windows 平台上会变为 MY_NAME=”Bill Gates” 其他平台上则表现为空字符串 生成器表达式：如需多个平台可以用逗号分割 https://cmake.org/cmake/help/lates

Use a package manager - Compiler caching - Throw hardware at it - Distributed builds- Andy and Bill’s Law - New software will always consume any increase in computing power that new hardware can provide law - Software is getting slower more rapidly than hardware is becoming faster What Andy Giveth, Bill Taketh Away 64Takeaways 65 Questions? Higher OrderTakeaways 66 - Profile your builds - Compilation

The Beginner’s Guide (Meeting C++ 2019) Daniela Engert - A Short Tour of C++ Modules (CppCon 2021) Bill Hoffman - import CMake: 2023 State of C++20 modules in CMake (CppNow 2023) Bret Brown - Modern CMake

(@vectorofbool) 8 Libraries: A First Step Toward Standard C++ Dependency Management - Bret Brown and Bill Hoffman- CppCon2023 A Common Package Specification: Getting Build Tools to Talk to Each Other -

… } 92 … … Creates CPS Read CPSNext steps - Resume work on this - Collaborate with CPS, Brett, Bill to mature proposal for ISO C++ (tooling) - Continue evolving implementation in Conan 2.0 - Move

while computer programmers are smart people with the ability to do incredibly stupid things.” — Bill Bryson, 1998 7 Copyright © 2022-2024 by Walter E. Brown. All rights reserved. Let’s begin with