This is an automated email from the ASF dual-hosted git repository.
solomax pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openmeetings.git
The following commit(s) were added to refs/heads/master by this push:
new c36224aa6 [OPENMEETINGS-2786] SBOM is added
c36224aa6 is described below
commit c36224aa67f0bb4a0a008afd0143ea0cf85f9a94
Author: Maxim Solodovnik <[email protected]>
AuthorDate: Tue Dec 3 15:15:38 2024 +0700
[OPENMEETINGS-2786] SBOM is added
---
pom.xml | 22 ++++++++++++++++++++++
1 file changed, 22 insertions(+)
diff --git a/pom.xml b/pom.xml
index 2ac0b546a..192d0b222 100644
--- a/pom.xml
+++ b/pom.xml
@@ -81,6 +81,7 @@
<frontend-maven-plugin.version>1.15.1</frontend-maven-plugin.version>
<swagger-plugin.version>2.1.6</swagger-plugin.version>
<plexus-utils.version>3.5.1</plexus-utils.version>
+ <cyclonedx.version>2.9.1</cyclonedx.version>
<!-- dependency versions -->
<junit.version>5.11.3</junit.version>
@@ -1213,6 +1214,10 @@
</execution>
</executions>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ </plugin>
</plugins>
<pluginManagement>
<plugins>
@@ -1632,6 +1637,23 @@
<artifactId>swagger-maven-plugin</artifactId>
<version>${swagger-plugin.version}</version>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+
<artifactId>cyclonedx-maven-plugin</artifactId>
+ <version>${cyclonedx.version}</version>
+ <executions>
+ <execution>
+
<id>build-sbom-cyclonedx</id>
+ <phase>package</phase>
+ <goals>
+
<goal>makeAggregateBom</goal>
+ </goals>
+ </execution>
+ </executions>
+ <configuration>
+
<outputName>${project.artifactId}-${project.version}-bom</outputName>
+ </configuration>
+ </plugin>
</plugins>
</pluginManagement>
</build>
