You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@camel.apache.org by ac...@apache.org on 2023/12/13 10:30:10 UTC
(camel) 03/03: CAMEL-20205 - Add SBOM to release and release-sbom script to LTS 3.22.x
This is an automated email from the ASF dual-hosted git repository.
acosentino pushed a commit to branch CAMEL-20205-3.x
in repository https://gitbox.apache.org/repos/asf/camel.git
commit ac8b6fbac6fe83d7b5ba6673f54b41d0ea845bf7
Author: Andrea Cosentino <an...@gmail.com>
AuthorDate: Wed Dec 13 11:29:25 2023 +0100
CAMEL-20205 - Add SBOM to release and release-sbom script to LTS 3.22.x
Signed-off-by: Andrea Cosentino <an...@gmail.com>
---
pom.xml | 18 ++++++++++++++++++
1 file changed, 18 insertions(+)
diff --git a/pom.xml b/pom.xml
index 4c1048106c5..7226076503b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -118,6 +118,7 @@
<!-- reproduceable builds: https://maven.apache.org/guides/mini/guide-reproducible-builds.html -->
<project.build.outputTimestamp>1688242060</project.build.outputTimestamp>
+ <cyclonedx-maven-plugin-version>2.7.10</cyclonedx-maven-plugin-version>
<maven-compiler-plugin-version>3.10.1</maven-compiler-plugin-version>
<maven-javadoc-plugin-version>3.2.0</maven-javadoc-plugin-version>
<maven-surefire-plugin-version>3.1.2</maven-surefire-plugin-version>
@@ -785,6 +786,23 @@
<failIfNoTests>false</failIfNoTests>
</configuration>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ <version>${cyclonedx-maven-plugin-version}</version>
+ <inherited>false</inherited>
+ <executions>
+ <execution>
+ <phase>package</phase>
+ <goals>
+ <goal>makeAggregateBom</goal>
+ </goals>
+ </execution>
+ </executions>
+ <configuration>
+ <outputName>${project.artifactId}-${project.version}-sbom</outputName>
+ </configuration>
+ </plugin>
</plugins>
</build>
</profile>