[cxf] branch main updated: Adding CycloneDX SBOM (#1480)

[coheigea]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/main by this push:
     new f373f6f0a3 Adding CycloneDX SBOM (#1480)
f373f6f0a3 is described below

commit f373f6f0a3f58f30fd8e583ab1ded1c8c7b22400
Author: Colm O hEigeartaigh <cohei...@users.noreply.github.com>
AuthorDate: Wed Oct 18 11:55:44 2023 +0100

    Adding CycloneDX SBOM (#1480)
---
 pom.xml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/pom.xml b/pom.xml
index 87e8aa787b..af237639c1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -688,6 +688,23 @@
                     <artifactId>maven-war-plugin</artifactId>
                     <version>3.3.2</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.cyclonedx</groupId>
+                    <artifactId>cyclonedx-maven-plugin</artifactId>
+                    <version>2.7.9</version>
+                    <executions>
+                        <execution>
+                            <id>make-bom</id>
+                            <phase>package</phase>
+                            <goals>
+                                <goal>makeAggregateBom</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                    <configuration>
+                        
<outputName>${project.artifactId}-${project.version}-bom</outputName>
+                    </configuration>
+                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>
@@ -703,6 +720,10 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
     <reporting>