dongjoon-hyun commented on PR #5281: URL: https://github.com/apache/hadoop/pull/5281#issuecomment-1376959730
Hi, @steveloughran . Basically, these are SBOM for jars. So, this PR aims to use `Maven Central` as the `SBOM` repository along with the release jars. As I described in the PR description, `hadoop-auth-3.4.0-SNAPSHOT.jar` will have `hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.xml` and `hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.json`. ``` -rw-r--r-- 1 dongjoon staff 84913 Jan 6 12:47 hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.json -rw-r--r-- 1 dongjoon staff 73722 Jan 6 12:47 hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.xml -rw-r--r-- 1 dongjoon staff 84457 Jan 6 12:47 hadoop-auth-3.4.0-SNAPSHOT-sources.jar -rw-r--r-- 1 dongjoon staff 114087 Jan 6 12:47 hadoop-auth-3.4.0-SNAPSHOT-tests.jar -rw-r--r-- 1 dongjoon staff 106678 Jan 6 12:47 hadoop-auth-3.4.0-SNAPSHOT.jar ``` -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org --------------------------------------------------------------------- To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org For additional commands, e-mail: common-issues-h...@hadoop.apache.org