This is an automated email from the ASF dual-hosted git repository.

solomax pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/openmeetings.git


The following commit(s) were added to refs/heads/master by this push:
     new 8db520284 [OPENMEETINGS-2786] spdx SBOM is added
8db520284 is described below

commit 8db520284ef4ac66928971b8cc8507d3427e4be8
Author: Maxim Solodovnik <[email protected]>
AuthorDate: Tue Dec 3 15:25:02 2024 +0700

    [OPENMEETINGS-2786] spdx SBOM is added
---
 pom.xml | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/pom.xml b/pom.xml
index 192d0b222..cc1ee78c5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -82,6 +82,7 @@
                <swagger-plugin.version>2.1.6</swagger-plugin.version>
                <plexus-utils.version>3.5.1</plexus-utils.version>
                <cyclonedx.version>2.9.1</cyclonedx.version>
+               <spdx.version>0.7.4</spdx.version>
 
                <!-- dependency versions -->
                <junit.version>5.11.3</junit.version>
@@ -1218,6 +1219,10 @@
                                <groupId>org.cyclonedx</groupId>
                                <artifactId>cyclonedx-maven-plugin</artifactId>
                        </plugin>
+                       <plugin>
+                               <groupId>org.spdx</groupId>
+                               <artifactId>spdx-maven-plugin</artifactId>
+                       </plugin>
                </plugins>
                <pluginManagement>
                        <plugins>
@@ -1654,6 +1659,20 @@
                                                
<outputName>${project.artifactId}-${project.version}-bom</outputName>
                                        </configuration>
                                </plugin>
+                               <plugin>
+                                       <groupId>org.spdx</groupId>
+                                       
<artifactId>spdx-maven-plugin</artifactId>
+                                       <version>${spdx.version}</version>
+                                       <executions>
+                                               <execution>
+                                                       <id>build-sbom-spdx</id>
+                                                       <phase>package</phase>
+                                                       <goals>
+                                                               
<goal>createSPDX</goal>
+                                                       </goals>
+                                               </execution>
+                                       </executions>
+                               </plugin>
                        </plugins>
                </pluginManagement>
        </build>

Reply via email to