Martijn Visser created FLINK-41232:
--------------------------------------
Summary: Enable SBOM generation in flink-connector-parent
Key: FLINK-41232
URL: https://issues.apache.org/jira/browse/FLINK-41232
Project: Flink
Issue Type: Improvement
Components: Connectors / Common
Reporter: Martijn Visser
Assignee: Martijn Visser
Enable cyclonedx-maven-plugin for every connector that inherits the parent:
- add it to build/plugins;
- bump it from 2.9.1 to 2.9.3;
- set includeProvidedScope=false;
- skip it in the fast profile.
Provided dependencies are left out for the reason given in ticket 2. For
connectors that keep Flink artifacts at compile scope by mistake, those
artifacts will show up as required. Elasticsearch 8, gcp-pubsub, aws kinesis
and glue, and hive do this today. Each connector should fix that when it takes
the new parent.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
