You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2023/09/07 07:54:44 UTC

[camel-kamelets] 01/01: Provide SBOM as released artifacts when releasing

This is an automated email from the ASF dual-hosted git repository.

acosentino pushed a commit to branch sbom-as-release-artifact
in repository https://gitbox.apache.org/repos/asf/camel-kamelets.git

commit a063edb87447718a8e3c0f09c7faecc52b9b2841
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Thu Sep 7 09:44:43 2023 +0200

    Provide SBOM as released artifacts when releasing
    
    Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
 pom.xml | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/pom.xml b/pom.xml
index 830c446b..f3923c9e 100644
--- a/pom.xml
+++ b/pom.xml
@@ -424,6 +424,23 @@
                             </failIfNoFiles><!-- usually, no file to do checksum: don't consider error -->
                         </configuration>
                     </plugin>
+                   <plugin>
+                   <groupId>org.cyclonedx</groupId>
+                   <artifactId>cyclonedx-maven-plugin</artifactId>
+                   <version>${cyclonedx-maven-plugin-version}</version>
+                   <inherited>false</inherited>
+                   <executions>
+                       <execution>
+                           <phase>package</phase>
+                           <goals>
+                               <goal>makeAggregateBom</goal>
+                           </goals>
+                      </execution>
+                   </executions>
+                   <configuration>
+                         <outputName>${project.artifactId}-${project.version}-sbom</outputName>
+                   </configuration>
+                </plugin>
                 </plugins>
             </build>
         </profile>