You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@santuario.apache.org by co...@apache.org on 2023/08/18 14:07:54 UTC

[santuario-xml-security-java] branch main updated: SANTUARIO-605 - Add sboms for Santuario (#202)

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/santuario-xml-security-java.git


The following commit(s) were added to refs/heads/main by this push:
     new 21bb05b3 SANTUARIO-605 - Add sboms for Santuario (#202)
21bb05b3 is described below

commit 21bb05b354b094a3d028524956391a3d422361c8
Author: Colm O hEigeartaigh <co...@users.noreply.github.com>
AuthorDate: Fri Aug 18 15:07:48 2023 +0100

    SANTUARIO-605 - Add sboms for Santuario (#202)
---
 pom.xml | 38 ++++++++++++++++++++++++++++++++++++++
 1 file changed, 38 insertions(+)

diff --git a/pom.xml b/pom.xml
index 71959589..4d0f0945 100644
--- a/pom.xml
+++ b/pom.xml
@@ -322,6 +322,36 @@
                         <autoVersionSubmodules>true</autoVersionSubmodules>
                     </configuration>
                 </plugin>
+                <plugin>
+                    <groupId>org.cyclonedx</groupId>
+                    <artifactId>cyclonedx-maven-plugin</artifactId>
+                    <version>2.7.9</version>
+                    <executions>
+                        <execution>
+                            <id>make-bom</id>
+                            <phase>package</phase>
+                            <goals>
+                                <goal>makeAggregateBom</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                    <configuration>
+                        <outputName>${project.artifactId}-${project.version}-bom</outputName>
+                    </configuration>
+                </plugin>
+                <plugin>
+                    <groupId>org.spdx</groupId>
+                    <artifactId>spdx-maven-plugin</artifactId>
+                    <version>0.7.0</version>
+                    <executions>
+                        <execution>
+                            <id>build-spdx</id>
+                            <goals>
+                                <goal>createSPDX</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                </plugin>
             </plugins>
         </pluginManagement>
 
@@ -604,6 +634,14 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
+            <plugin>
+                <groupId>org.spdx</groupId>
+                <artifactId>spdx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>