[GitHub] [solr] risdenk commented on a diff in pull request #1203: introduce org.cyclonedx.bom gradle plugin

[GitBox <gi...@apache.org>]

risdenk commented on code in PR #1203:
URL: https://github.com/apache/solr/pull/1203#discussion_r1061863631


##########
build.gradle:
##########
@@ -28,6 +28,19 @@ plugins {
   id "net.ltgt.errorprone" version "3.0.1" apply false
   id 'com.diffplug.spotless' version "6.5.2" apply false
   id 'com.github.node-gradle.node' version '3.4.0' apply false
+  id 'org.cyclonedx.bom' version '1.7.2'
+}
+
+cyclonedxBom {
+  includeConfigs = ["runtimeClasspath"]
+  skipConfigs = ["compileClasspath", "testCompileClasspath"]
+  projectType = "application"
+  schemaVersion = "1.4"
+  destination = file("build/reports")
+  outputName = "CycloneDX-Sbom"
+  outputFormat = "all"
+  includeBomSerialNumber = true
+  componentVersion = "2.0.0"
 }

Review Comment:
   This should end up in a separate config file like `gradle/validation/cyclonedx.gradle` - another example of similar config would be any of the files in `gradle/validation`



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org