Hi I've merged my Ivy-support PR and later refactored the way sbomLink (read another CycloneDX SBOM to fill a component's contents) and Ivy support (read data from an Iyy module work). In theory this would allow us to split the Ivy specific class into a separate Antlib but I'm afraid this would make classloader nightmares even worse - so I'll stick with it.
It should be straight forward to add an implementation of top of Maven's resolution engine if one was so inclined. The list of things I've added since 0.1 is pretty long[1] - and I have broken both the Java and the Ant API. It would be good if people wanted to have a look [2]. By now I've settled with explaining how to use the classloader task to make Ivy work inside the Antlib as a paragraph of many. I'd be willing to cut a new release soon. Not sure whether we want to do so before releasing Ant or about at the same time. Releasing it earlier would allow Ant to create 1.7 CycloneDX SBOMs, but that alone doesn't really warrant a delay in the Ant release. Stefan [1] https://github.com/apache/ant-antlibs-cyclonedx/blob/main/changes.xml [2] https://github.com/apache/ant-antlibs-cyclonedx/compare/rel/0.1...main --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
