Software components (SBOM)
For each version of Walkie Desk we publish the list of the software components it contains, its software bill of materials (SBOM): third-party libraries with version, license and origin.
Current versions
| Product | Version | File |
|---|---|---|
| Walkie Desk for Windows | 0.10.5 | walkiedesk-host-windows-0.10.5.cdx.json |
| QuickSupport for Windows | 0.10.5 | walkiedesk-quicksupport-windows-0.10.5.cdx.json |
| Walkie Desk for Linux (deb and rpm) | 0.10.5 | walkiedesk-host-linux-0.10.5.cdx.json |
| Walkie Desk for Mac (beta) | 0.10.5 | walkiedesk-host-macos-0.10.5.cdx.json |
| Walkie Desk server | 0.10.5 | walkiedesk-server-0.10.5.cdx.json |
| User area and browser viewer | 0.10.5 | walkiedesk-web-0.10.5.cdx.json |
When a new version comes out we publish its list; the lists of earlier versions stay available here, with the same name and a different version.
What it contains
- every third-party library included in the product, with version, license, project website and the dependencies between libraries;
- the origin: for C and C++ libraries the vcpkg build recipe used, for the server the Go modules, for the browser the npm packages copied into our code;
- for the programs you download from the Download page, the SHA-256 fingerprint of the published files;
- Cisco’s OpenH264 codec, marked as optional: it is not in the package, the program downloads it from Cisco’s website and uses it only if its SHA-256 fingerprint is the expected one.
What it does not contain
- operating system components that the program uses but does not distribute: Windows, Linux system libraries (for example the graphics libraries), macOS frameworks;
- the browser you connect with, which brings its own WebRTC implementation;
- the software of the servers that run the service (operating system, database, web server, relay server), which we do not distribute.
What it is for
With these files you can check, also with analysis tools that read the CycloneDX format, whether a vulnerability made public in a library affects the version of Walkie Desk you use. We follow the vulnerabilities of our components and, when one affects Walkie Desk, we fix it and publish a security advisory.
If you think a vulnerability in a component makes Walkie Desk attackable, report it to us.
The list of components is part of the documentation required by Regulation (EU) 2024/2847 (Cyber Resilience Act).