SBOM: spdx creationInfo `created` field is always `1970-01-01T00:00:00Z`

[adam-fowler]

Is it reproducible with SwiftPM command-line tools: swift build, swift test, swift package etc?

• Confirmed reproduction steps with SwiftPM CLI. The description text must include reproduction steps with either of command-line SwiftPM commands, swift build, swift test, swift package etc.

Description

All SPDX SBOMs created with SwiftPM have a CreationInfo class with the created field set to 1970-01-01T00:00:00Z.

Expected behavior

created field will be set to the date when SPDX file was created

Actual behavior

created field is always set to 1970-01-01T00:00:00Z.

Steps to reproduce

1. swift build --sbom-spec spdx
2. Check generated file

Swift Package Manager version/commit hash

No response

Swift & OS version (output of swift --version ; uname -a)

Swift version 6.4-dev (LLVM bd4914e5e305d02, Swift b9395feff7b870b)
Target: aarch64-unknown-linux-gnu