You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@hop.apache.org by "hansva (via GitHub)" <gi...@apache.org> on 2024/08/26 13:42:14 UTC
[PR] Add Cyclonedx SBOM during release, #4235 (hop)
hansva opened a new pull request, #4244:
URL: https://github.com/apache/hop/pull/4244
Added the cyclonedx maven plugin to generate SBOM files.
Placed the plugin into a profile that will only be executed during our release process.
The SBOM generation does take quite some additional CPU time.
------------------------
Thank you for your contribution! Follow this checklist to help us incorporate your contribution quickly and easily:
- [ ] Run `mvn clean install apache-rat:check` to make sure basic checks pass. A more thorough check will be performed on your pull request automatically.
- [ ] If you have a group of commits related to the same change, please squash your commits into one and force push your branch using `git rebase -i`.
- [ ] Mention the appropriate issue in your description (for example: `addresses #123`), if applicable.
To make clear that you license your contribution under the [Apache License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
you have to acknowledge this by using the following check-box.
- [ ] I hereby declare this contribution to be licensed under the [Apache License Version 2.0, January 2004](http://www.apache.org/licenses/LICENSE-2.0)
- [ ] In any other case, please file an [Apache Individual Contributor License Agreement](https://www.apache.org/licenses/icla.pdf).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "dsanderbi (via GitHub)" <gi...@apache.org>.
dsanderbi commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2640989012
Hi @hansva ,
Maybe I'm overlooking something, but unfortunately, the bom.json is not part of the latest release of Apache Hop 2.11. I can't find it in apache-hop-client-2.11.0.zip.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "dsanderbi (via GitHub)" <gi...@apache.org>.
dsanderbi commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2645099776
@hansva thank you for the info!
It would be great to include the bom to the download page.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "hansva (via GitHub)" <gi...@apache.org>.
hansva commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2958232620
I think that this one will also include everything.
https://repo1.maven.org/maven2/org/apache/hop/hop/2.14.0/
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "hansva (via GitHub)" <gi...@apache.org>.
hansva commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2641082393
Hi @dsanderbi it's not included in the client zip but is available on [maven central ](https://repo1.maven.org/maven2/org/apache/hop/hop-client/2.11.0/)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "dsanderbi (via GitHub)" <gi...@apache.org>.
dsanderbi commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2958212951
Hi @hansva
i can't find the SBOM file, has the location changed?
Only 2.10 & 2.11 is present.
https://repo1.maven.org/maven2/org/apache/hop/hop-client/
Is there any update if you will add the SBOM to the download page?
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "hansva (via GitHub)" <gi...@apache.org>.
hansva merged PR #4244:
URL: https://github.com/apache/hop/pull/4244
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Add Cyclonedx SBOM during release, #4235 (hop)
Posted by "hansva (via GitHub)" <gi...@apache.org>.
hansva commented on PR #4244:
URL: https://github.com/apache/hop/pull/4244#issuecomment-2641093077
Maybe we should change our release process and add the file to the download page too
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@hop.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org