This is an automated email from the ASF dual-hosted git repository. jdaugherty pushed a commit to branch 7.0.x in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 7a944dd9a1868f74c10b1da153d44ef90b2fc315 Author: James Daugherty <[email protected]> AuthorDate: Wed Oct 15 12:42:18 2025 -0400 chore: update sbom references so they are reproducible --- .../org/apache/grails/buildsrc/SbomPlugin.groovy | 34 ++++++++++++++++------ 1 file changed, 25 insertions(+), 9 deletions(-) diff --git a/build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/SbomPlugin.groovy b/build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/SbomPlugin.groovy index 9fa5580013..00c171b865 100644 --- a/build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/SbomPlugin.groovy +++ b/build-logic/plugins/src/main/groovy/org/apache/grails/buildsrc/SbomPlugin.groovy @@ -164,16 +164,32 @@ class SbomPlugin implements Plugin<Project> { ) ] )) - [email protected]([ - new ExternalReference( - url: 'https://grails.apache.org', - type: ExternalReference.Type.WEBSITE - ), - new ExternalReference( - url: 'https://github.com/apache/grails-core', - type: ExternalReference.Type.VCS + + def projectVersion = project.findProperty('projectVersion').toString() + def references = [ + new ExternalReference( + url: 'https://grails.apache.org', + type: ExternalReference.Type.WEBSITE + ), + new ExternalReference( + url: 'https://github.com/apache/grails-core', + type: ExternalReference.Type.VCS + ), + new ExternalReference( + url: projectVersion.endsWith('SNAPSHOT') ? '[email protected]' : '[email protected]', + type: ExternalReference.Type.MAILING_LIST + ) + ] + + if(!projectVersion.endsWith('SNAPSHOT')) { + references.add( + new ExternalReference( + url: "https://grails.apache.org/docs/${project.findProperty('projectVersion')}/index.html", + type: ExternalReference.Type.DOCUMENTATION + ) ) - ]) + } + [email protected](references) // sboms are published for the purposes of vulnerability analysis so only include the runtime classpath includeConfigs = ['runtimeClasspath']
