[cxf] branch 3.5.x-fixes updated: Adding CycloneDX SBOM (#1480)

[coheigea]

This is an automated email from the ASF dual-hosted git repository.

coheigea pushed a commit to branch 3.5.x-fixes
in repository https://gitbox.apache.org/repos/asf/cxf.git


The following commit(s) were added to refs/heads/3.5.x-fixes by this push:
     new b729e66a76 Adding CycloneDX SBOM (#1480)
b729e66a76 is described below

commit b729e66a76592adeb2bd1af6d77b1713237d111e
Author: Colm O hEigeartaigh <cohei...@users.noreply.github.com>
AuthorDate: Wed Oct 18 11:55:44 2023 +0100

    Adding CycloneDX SBOM (#1480)
    
    (cherry picked from commit f373f6f0a3f58f30fd8e583ab1ded1c8c7b22400)
    (cherry picked from commit 6653d53cba903cef3407de200259cad2c83ed15f)
---
 pom.xml | 21 +++++++++++++++++++++
 1 file changed, 21 insertions(+)

diff --git a/pom.xml b/pom.xml
index d1e3b81178..0e03575252 100644
--- a/pom.xml
+++ b/pom.xml
@@ -686,6 +686,23 @@
                     <artifactId>maven-war-plugin</artifactId>
                     <version>3.3.2</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.cyclonedx</groupId>
+                    <artifactId>cyclonedx-maven-plugin</artifactId>
+                    <version>2.7.9</version>
+                    <executions>
+                        <execution>
+                            <id>make-bom</id>
+                            <phase>package</phase>
+                            <goals>
+                                <goal>makeAggregateBom</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                    <configuration>
+                        
<outputName>${project.artifactId}-${project.version}-bom</outputName>
+                    </configuration>
+                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>
@@ -701,6 +718,10 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
     <reporting>