From 300a4e8eed045ffd242f41c6eafbba32f16bc5d4 Mon Sep 17 00:00:00 2001 From: Russ Poetker Date: Thu, 21 Nov 2024 08:34:42 -0500 Subject: [PATCH 1/3] Add cyclonedx maven plugin --- pom.xml | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/pom.xml b/pom.xml index fd73b7a..c09e212 100644 --- a/pom.xml +++ b/pom.xml @@ -81,6 +81,7 @@ 1.7.0 3.5.2 1.3.0 + 2.8.2 8.41.1 1.1.0 @@ -282,6 +283,26 @@ ${maven-failsafe-plugin.version} + + org.cyclonedx + cyclonedx-maven-plugin + ${cyclonedx-maven-plugin.version} + + + generate-resources + + makeAggregateBom + + + application + ${project.build.outputDirectory}/META-INF/sbom + json + application.cdx + + + + + From bcebbb612f39998ff1035aa24307478af4abeac1 Mon Sep 17 00:00:00 2001 From: Russ Poetker Date: Thu, 21 Nov 2024 13:31:09 -0500 Subject: [PATCH 2/3] Clean pom --- pom.xml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index c09e212..6673113 100644 --- a/pom.xml +++ b/pom.xml @@ -22,38 +22,38 @@ Jim Martino jrm@jhu.edu The Sheridan Libraries, Johns Hopkins University - https://www.library.jhu.edu/ + https://library.jhu.edu/ Mark Patton mpatton@jhu.edu The Sheridan Libraries, Johns Hopkins University - https://www.library.jhu.edu/ + https://library.jhu.edu/ John Abrahams jabrah20@jhu.edu The Sheridan Libraries, Johns Hopkins University - https://www.library.jhu.edu/ + https://library.jhu.edu/ Tim Sanders tsande16@jhu.edu The Sheridan Libraries, Johns Hopkins University - https://www.library.jhu.edu/ + https://library.jhu.edu/ Russ Poetker rpoetke1@jhu.edu The Sheridan Libraries, Johns Hopkins University - https://www.library.jhu.edu/ + https://library.jhu.edu/ scm:git:git://github.com/eclipse-pass/main.git scm:git:ssh://github.com:eclipse-pass/main.git - http://github.com/eclipse-pass/main/tree/main + https://github.com/eclipse-pass/main/tree/main HEAD From 47b0509729f47a9458c0dcd809a70edb7a53d31f Mon Sep 17 00:00:00 2001 From: Russ Poetker Date: Thu, 21 Nov 2024 14:36:40 -0500 Subject: [PATCH 3/3] Use makeBom since creating sboms in modules specifically --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 6673113..f367f04 100644 --- a/pom.xml +++ b/pom.xml @@ -291,7 +291,7 @@ generate-resources - makeAggregateBom + makeBom application