This is an automated email from the ASF dual-hosted git repository. vy pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/logging-parent.git
commit fc8fd366f29d8d199f2801085c10fe4df277aee1 Author: Volkan Yazıcı <[email protected]> AuthorDate: Fri Oct 20 08:41:29 2023 +0200 Enhance SBOM integration and its docs --- pom.xml | 4 ++++ src/site/_features.adoc | 10 +++++++++- 2 files changed, 13 insertions(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index 1a282f7..dbe0925 100644 --- a/pom.xml +++ b/pom.xml @@ -138,6 +138,10 @@ <url>https://github.com/apache/logging-parent/actions</url> </ciManagement> + <distributionManagement> + <downloadUrl>https://logging.apache.org/logging-parent/latest/#distribution</downloadUrl> + </distributionManagement> + <properties> <!-- project version --> diff --git a/src/site/_features.adoc b/src/site/_features.adoc index 34e4eaa..fea2d37 100644 --- a/src/site/_features.adoc +++ b/src/site/_features.adoc @@ -16,6 +16,7 @@ //// include::_constants.adoc[] +:cyclonedx-maven-plugin-link: https://github.com/CycloneDX/cyclonedx-maven-plugin[`cyclonedx-maven-plugin`] [#features] == Features @@ -32,9 +33,16 @@ The provided parent POM features the following conveniences: * https://maven.apache.org/enforcer/maven-enforcer-plugin/[`maven-enforcer-plugin`] checks * https://github.com/diffplug/spotless/tree/main/plugin-maven[`spotless-maven-plugin`] integration for code formatting * https://github.com/bndtools/bnd/blob/master/maven-plugins/bnd-maven-plugin/README.md[`bnd-maven-plugin`] integration for auto-generating OSGi and JPMS descriptors -* https://github.com/CycloneDX/cyclonedx-maven-plugin[`cyclonedx-maven-plugin`] integration for auto-generating Software Bill of Materials (SBOM) +* {cyclonedx-maven-plugin-link} integration for auto-generating Software Bill of Materials (SBOM) * https://asciidoc.org/[AsciiDoc]-based site generation +[#cyclonedx-sbom] +==== CycloneDX Software Bill of Materials (SBOM) + +{project-name} streamlines the generation of SBOMs using {cyclonedx-maven-plugin-link}. +Plugin execution generates SBOM files for each module, including the root one. +Generated SBOM files are attached as artifacts with `cyclonedx` classifier and `xml`/`json` extensions, that is, `<artifactId>-<version>-cyclonedx.{xml,json}`. + [#reusable-workflows] === Reusable GitHub Actions workflows
