This is an automated email from the ASF dual-hosted git repository.
adoroszlai pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ratis-thirdparty.git
The following commit(s) were added to refs/heads/master by this push:
new d23519c RATIS-2110. Publish SBOM artifacts (#51)
d23519c is described below
commit d23519c4fc56c53601ee4232be38fcb962b37a64
Author: Doroszlai, Attila <[email protected]>
AuthorDate: Mon Jun 10 07:41:13 2024 +0200
RATIS-2110. Publish SBOM artifacts (#51)
---
.github/workflows/ci.yaml | 2 +-
pom.xml | 18 ++++++++++++++++++
2 files changed, 19 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 55b601a..1d5a743 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -36,7 +36,7 @@ jobs:
distribution: 'temurin'
java-version: 8
- name: Run a full build
- run: mvn --no-transfer-progress -Ptest clean verify
+ run: mvn --no-transfer-progress -Ptest -Prelease clean verify
- name: Delete temporary build artifacts
run: rm -rf ~/.m2/repository/org/apache/ratis
if: always()
diff --git a/pom.xml b/pom.xml
index 0430790..c8e280f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -52,6 +52,7 @@
<project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
<!-- Maven plugin versions -->
<copy-rename-maven-plugin.version>1.0</copy-rename-maven-plugin.version>
+ <cyclonedx.version>2.8.0</cyclonedx.version>
<exec-maven-plugin.version>1.3.1</exec-maven-plugin.version>
<maven-bundle-plugin.version>2.5.3</maven-bundle-plugin.version>
<maven-checkstyle-plugin.version>2.15</maven-checkstyle-plugin.version>
@@ -267,6 +268,11 @@
<artifactId>maven-bundle-plugin</artifactId>
<version>${maven-bundle-plugin.version}</version>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ <version>${cyclonedx.version}</version>
+ </plugin>
</plugins>
</pluginManagement>
@@ -394,6 +400,18 @@
</execution>
</executions>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ <executions>
+ <execution>
+ <phase>package</phase>
+ <goals>
+ <goal>makeBom</goal>
+ </goals>
+ </execution>
+ </executions>
+ </plugin>
</plugins>
</build>
</profile>
