You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tooling.apache.org by hb...@apache.org on 2026/06/19 15:39:11 UTC

(tooling-atr-maven-plugin) branch main updated: upload SBOM signature and checksum

This is an automated email from the ASF dual-hosted git repository.

hboutemy pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tooling-atr-maven-plugin.git


The following commit(s) were added to refs/heads/main by this push:
     new d345fa0  upload SBOM signature and checksum
d345fa0 is described below

commit d345fa0dcfc6273bb881d7ecb9ff9bcfe7b668b2
Author: Hervé Boutemy <hb...@apache.org>
AuthorDate: Fri Jun 19 17:12:18 2026 +0200

    upload SBOM signature and checksum
---
 pom.xml | 24 ++++++++++++++++++++++++
 1 file changed, 24 insertions(+)

diff --git a/pom.xml b/pom.xml
index 89f6198..8fb1b81 100644
--- a/pom.xml
+++ b/pom.xml
@@ -499,6 +499,28 @@ under the License.
        -->
       <build>
         <plugins>
+          <plugin>
+            <groupId>net.nicoulaj.maven.plugins</groupId>
+            <artifactId>checksum-maven-plugin</artifactId>
+            <version>${version.checksum-maven-plugin}</version>
+            <executions>
+              <execution>
+                <id>cyclonedx-checksum</id>
+                <goals>
+                  <goal>artifacts</goal>
+                </goals>
+                <phase>post-integration-test</phase>
+                <configuration>
+                  <algorithms>
+                    <algorithm>SHA-512</algorithm>
+                  </algorithms>
+                  <includeClassifiers>cyclonedx</includeClassifiers>
+                  <excludeMainArtifact>true</excludeMainArtifact>
+                  <csvSummary>false</csvSummary>
+                </configuration>
+              </execution>
+            </executions>
+          </plugin>
           <plugin>
             <groupId>org.apache.tooling</groupId>
             <artifactId>atr-maven-plugin</artifactId>
@@ -526,6 +548,8 @@ under the License.
                     <file>${project.build.directory}/${project.artifactId}-${project.version}-source-release.zip.sha512</file>
                     <file>${project.build.directory}/${project.artifactId}-${project.version}-source-release.zip.asc</file>
                     <file>${project.build.directory}/${project.artifactId}-${project.version}-cyclonedx.json</file>
+                    <file>${project.build.directory}/${project.artifactId}-${project.version}-cyclonedx.json.sha512</file>
+                    <file>${project.build.directory}/${project.artifactId}-${project.version}-cyclonedx.json.asc</file>
                   </files>
                 </configuration>
               </execution>


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@tooling.apache.org
For additional commands, e-mail: commits-help@tooling.apache.org