You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@camel.apache.org by "Andrea Cosentino (Jira)" <ji...@apache.org> on 2024/04/03 09:14:00 UTC

[jira] [Commented] (CAMEL-20616) Provide SPDX SBOM in Camel project

    [ https://issues.apache.org/jira/browse/CAMEL-20616?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17833459#comment-17833459 ] 

Andrea Cosentino commented on CAMEL-20616:
------------------------------------------

This requires probably more work. They are not providing a way of aggregating the spdx output in a single file. So we end up having a file for each module.

> Provide SPDX SBOM in Camel project
> ----------------------------------
>
>                 Key: CAMEL-20616
>                 URL: https://issues.apache.org/jira/browse/CAMEL-20616
>             Project: Camel
>          Issue Type: Improvement
>            Reporter: Andrea Cosentino
>            Assignee: Andrea Cosentino
>            Priority: Major
>             Fix For: 4.6.0
>
>
> https://github.com/spdx/spdx-maven-plugin
> It's still unclear what will be the standard between cyclonedx and spdx, so it makes sense to provide both in our releases.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)