You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cxf.apache.org by co...@apache.org on 2023/10/18 09:35:06 UTC
[cxf] 01/01: Adding CycloneDX SBOM
This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch coheigea/cyclonedx
in repository https://gitbox.apache.org/repos/asf/cxf.git
commit 622b80fdb200d9810e1a5a328970449017c45c36
Author: Colm O hEigeartaigh <co...@apache.org>
AuthorDate: Wed Oct 18 10:34:48 2023 +0100
Adding CycloneDX SBOM
---
pom.xml | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/pom.xml b/pom.xml
index 87e8aa787b..af237639c1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -688,6 +688,23 @@
<artifactId>maven-war-plugin</artifactId>
<version>3.3.2</version>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ <version>2.7.9</version>
+ <executions>
+ <execution>
+ <id>make-bom</id>
+ <phase>package</phase>
+ <goals>
+ <goal>makeAggregateBom</goal>
+ </goals>
+ </execution>
+ </executions>
+ <configuration>
+ <outputName>${project.artifactId}-${project.version}-bom</outputName>
+ </configuration>
+ </plugin>
</plugins>
</pluginManagement>
<plugins>
@@ -703,6 +720,10 @@
</execution>
</executions>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ </plugin>
</plugins>
</build>
<reporting>