dongjoon-hyun commented on PR #5281:
URL: https://github.com/apache/hadoop/pull/5281#issuecomment-1376959730

   Hi, @steveloughran . Basically, these are SBOM for jars. So, this PR aims to 
use `Maven Central` as the `SBOM` repository along with the release jars. As I 
described in the PR description, `hadoop-auth-3.4.0-SNAPSHOT.jar` will have 
`hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.xml` and 
`hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.json`.
   ```
   -rw-r--r--  1 dongjoon  staff   84913 Jan  6 12:47 
hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.json
   -rw-r--r--  1 dongjoon  staff   73722 Jan  6 12:47 
hadoop-auth-3.4.0-SNAPSHOT-cyclonedx.xml
   -rw-r--r--  1 dongjoon  staff   84457 Jan  6 12:47 
hadoop-auth-3.4.0-SNAPSHOT-sources.jar
   -rw-r--r--  1 dongjoon  staff  114087 Jan  6 12:47 
hadoop-auth-3.4.0-SNAPSHOT-tests.jar
   -rw-r--r--  1 dongjoon  staff  106678 Jan  6 12:47 
hadoop-auth-3.4.0-SNAPSHOT.jar
   ```


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org

Reply via email to