You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2023/08/02 13:40:16 UTC

[commons-parent] 10/10: Add SPDX SBOM in the package phase.

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-parent.git

commit 5ac5ceed4916b473c0a6176ab0882202629dba39
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Wed Aug 2 09:38:53 2023 -0400

    Add SPDX SBOM in the package phase.
---
 pom.xml                 | 5 +++--
 src/changes/changes.xml | 3 ++-
 2 files changed, 5 insertions(+), 3 deletions(-)

diff --git a/pom.xml b/pom.xml
index a5d9922..7ff91fb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -835,7 +835,7 @@
           <version>${commons.cyclonedx.version}</version>
           <executions>
             <execution>
-              <id>make-bom</id>
+              <id>build-sbom-cyclonedx</id>
               <phase>package</phase>
               <goals>
                 <goal>makeAggregateBom</goal>
@@ -852,7 +852,8 @@
           <version>${commons.spdx.version}</version>
           <executions>
             <execution>
-              <id>build-spdx</id>
+              <id>build-sbom-spdx</id>
+              <phase>package</phase>
               <goals>
                 <goal>createSPDX</goal>
               </goals>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 8e8765c..12673b3 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -71,8 +71,9 @@ The <action> type attribute can be add,update,fix,remove.
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM property commons.javadoc.javaee9.link.</action>
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM property commons.javadoc.javaee9.1.link.</action>
            <action type="add" dev="ggregory" due-to="Gary Gregory">Add POM property commons.javadoc.javaee10.link.</action>
-           <action type="add" dev="ggregory" due-to="Gary Gregory">Don't use the animal sniffer plugin on Java >=9, use the release flag instead.</action>
+           <action type="add" dev="ggregory" due-to="Gary Gregory">Add SPDX SBOM in the package phase.</action>
            <!-- FIX -->           
+           <action type="add" dev="ggregory" due-to="Gary Gregory">Don't use the animal sniffer plugin on Java >=9, use the release flag instead.</action>
            <!-- UPDATE -->
            <action type="update" dev="ggregory" due-to="Dependabot">Bump GitHub actions in .github.</action>
            <action type="update" dev="ggregory" due-to="Dependabot">Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276.</action>