Add external dependencies CI/CD pipelines with SBOM generation

- Create external-dependencies directory structure with per-package pipelines
- Add DEPENDENCIES-INVENTORY.md with comprehensive dependency tracking
- Create ubuntu-26.04-build-container base image with all dependencies
- Add per-package Jenkinsfiles: log4qt, grantlee, googletest, postgresql, qt6-framework, kdreports
- Add SBOM generation script (generate-sbom.sh) for CycloneDX, SLSA v1.0, and license reports
- Integrate SBOM generation into all Jenkins pipelines
- Add external-dependencies/README.md with usage and security documentation
- Exclude proprietary license files (rti_license.dat) from git tracking

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Entire-Checkpoint: 01M6KNFNMSPW4SY4J4SQTTPVBP

external-dependencies/qt6-framework/Dockerfile

@@ -0,0 +1,41 @@
+# Qt6 Framework Installation
+FROM harbor.sl.defence-elec.de/proxydockerhub/library/ubuntu:26.04
+
+LABEL maintainer="Legatus Team"
+LABEL description="Qt6 framework installation via aqtinstall"
+LABEL version="6.10.2"
+
+ENV DEBIAN_FRONTEND=noninteractive
+
+ARG HTTP_PROXY=""
+ARG HTTPS_PROXY=""
+ARG NO_PROXY="localhost,127.0.0.1,.sl.defence-elec.de"
+
+ENV http_proxy=${HTTP_PROXY}
+ENV https_proxy=${HTTPS_PROXY}
+ENV no_proxy=${NO_PROXY}
+
+# Install Python and aqtinstall
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    python3 python3-pip ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+RUN pip3 install --break-system-packages --quiet aqtinstall
+
+# Install Qt6
+ARG QT_VERSION=6.10.2
+ARG QT_MODULES="qtmultimedia qtserialport qtimageformats qtwebsockets qtwebengine qtpdf qtwebview qt5compat qtwebchannel qtpositioning qtlocation qtsensors"
+
+RUN aqt install-qt linux desktop ${QT_VERSION} linux_gcc_64 \
+    -m ${QT_MODULES} \
+    --outputdir /opt/Qt \
+    && ln -sfn /opt/Qt/${QT_VERSION}/gcc_64/bin/* /usr/local/bin/
+
+ENV QT_HOME=/opt/Qt/${QT_VERSION}/gcc_64
+ENV PATH=${QT_HOME}/bin:${PATH}
+ENV CMAKE_PREFIX_PATH=${QT_HOME}/lib/cmake
+
+# Verify installation
+RUN qmake6 --version && qmake6 --version | grep -q "${QT_VERSION}"
+
+CMD ["/bin/bash"]

external-dependencies/qt6-framework/Jenkinsfile

@@ -0,0 +1,100 @@
+pipeline {
+    agent any
+
+    environment {
+        QT_VERSION = '6.10.2'
+        QT_MODULES = 'qtmultimedia qtserialport qtimageformats qtwebsockets qtwebengine qtpdf qtwebview qt5compat qtwebchannel qtpositioning qtlocation qtsensors'
+        HARBOR_REGISTRY = 'harbor.sl.defence-elec.de/proxydockerhub'
+        IMAGE_NAME = 'qt6-framework'
+        IMAGE_TAG = "${QT_VERSION}"
+    }
+
+    options {
+        timeout(time: 30, unit: 'MINUTES')
+        buildDiscarder(logRotator(numToKeepStr: '10'))
+    }
+
+    stages {
+        stage('Checkout') {
+            steps {
+                checkout scm
+            }
+        }
+
+        stage('Build Qt6 Container') {
+            steps {
+                script {
+                    dir('external-dependencies/qt6-framework') {
+                        sh """
+                            docker build \
+                              --build-arg QT_VERSION=${QT_VERSION} \
+                              --build-arg QT_MODULES='${QT_MODULES}' \
+                              -t ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} \
+                              -t ${HARBOR_REGISTRY}/${IMAGE_NAME}:latest \
+                              .
+                        """
+                    }
+                }
+            }
+        }
+
+        stage('Verify Qt6') {
+            steps {
+                script {
+                    sh """
+                        docker run --rm ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} bash -c '
+                          echo "Qt6 Version:" && qmake6 --version &&
+                          qmake6 --version | grep -q "${QT_VERSION}"
+                        '
+                    """
+                }
+            }
+        }
+
+        stage('Generate SBOM') {
+            steps {
+                script {
+                    dir('external-dependencies/qt6-framework') {
+                        sh """
+                            mkdir -p sbom
+                            
+                            # Set environment variables for SBOM generation
+                            export GIT_URL="${env.GIT_URL}"
+                            export GIT_COMMIT="${env.GIT_COMMIT}"
+                            export BUILD_NUMBER="${env.BUILD_NUMBER}"
+                            export DOCKERFILE_PATH="external-dependencies/qt6-framework/Dockerfile"
+                            
+                            # Generate CycloneDX SBOM, SLSA provenance, and license report
+                            bash ../scripts/generate-sbom.sh qt6-framework ${QT_VERSION} ./sbom
+                        """
+                    }
+                }
+            }
+        }
+
+        stage('Push to Registry') {
+            steps {
+                script {
+                    withCredentials([usernamePassword(
+                        credentialsId: 'harbor-credentials',
+                        usernameVariable: 'HARBOR_USER',
+                        passwordVariable: 'HARBOR_PASSWORD'
+                    )]) {
+                        sh """
+                            echo ${HARBOR_PASSWORD} | docker login ${HARBOR_REGISTRY} -u ${HARBOR_USER} --password-stdin
+                            docker push ${HARBOR_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}
+                            docker push ${HARBOR_REGISTRY}/${IMAGE_NAME}:latest
+                            docker logout ${HARBOR_REGISTRY}
+                        """
+                    }
+                }
+            }
+        }
+    }
+
+    post {
+        always {
+            cleanWs()
+        }
+    }
+}

external-dependencies/qt6-framework/README.md

@@ -0,0 +1,37 @@
+# Qt6 Framework
+
+Qt6 installation pipeline using aqtinstall for air-gapped environments.
+
+## Version
+
+- **Qt Version:** 6.10.2
+- **Platform:** Linux GCC 64-bit
+- **Modules:** qtmultimedia, qtserialport, qtimageformats, qtwebsockets, qtwebengine, qtpdf, qtwebview, qt5compat, qtwebchannel, qtpositioning, qtlocation, qtsensors
+
+## Installation
+
+```bash
+pip3 install --break-system-packages --quiet aqtinstall
+aqt install-qt linux desktop 6.10.2 linux_gcc_64 \
+  -m qtmultimedia qtserialport qtimageformats qtwebsockets qtwebengine \
+     qtpdf qtwebview qt5compat qtwebchannel qtpositioning qtlocation qtsensors \
+  --outputdir /opt/Qt
+```
+
+## Environment
+
+```bash
+export QT_HOME=/opt/Qt/6.10.2/gcc_64
+export PATH=${QT_HOME}/bin:${PATH}
+export CMAKE_PREFIX_PATH=${QT_HOME}/lib/cmake
+```
+
+## License
+
+LGPL/GPL/Commercial - See Qt licensing terms
+
+## SBOM
+
+- `sbom/qt6-6.10.2-sbom.json`
+- `sbom/qt6-6.10.2-provenance.json`
+- `sbom/qt6-6.10.2-licenses.md`