ppkarwasz commented on PR #828:
URL: https://github.com/apache/commons-compress/pull/828#issuecomment-6527718821
I used Groovy here, because it is basically Java, so everybody understands
it. Groovy 4 is the last version that runs on JDK 8 and we don't only run unit
tests on JDK 8, but we also try to compile the project using that version.
The script is a temporary patch to perform a simple JSON transformation that
no current Maven plugins do. The definitive version will:
1. Download the SBOM produced by `zstd-jni`,
2. Replace the information about `zstd-jni` we produce (which is basically
derived from the POM file), with the information the project does itself.
To be more concrete, everything the script is doing is replacing:
```json
{
"type" : "library",
"bom-ref" : "pkg:maven/com.github.luben/[email protected]?type=jar",
"publisher" : "com.github.luben",
"group" : "com.github.luben",
"name" : "zstd-jni",
"version" : "1.5.7-13",
"description" : "JNI bindings for Zstd native library that provides fast
and high compression lossless algorithm for Java and all JVM languages.",
"scope" : "optional",
"licenses" : [
{
"license" : {
"id" : "BSD-2-Clause"
}
}
],
"purl" : "pkg:maven/com.github.luben/[email protected]?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "https://github.com/luben/zstd-jni";
}
]
}
```
with
```json
{
"type" : "library",
"bom-ref" : "pkg:maven/com.github.luben/[email protected]?type=jar",
"isExternal" : true,
"publisher" : "com.github.luben",
"group" : "com.github.luben",
"name" : "zstd-jni",
"version" : "1.5.7-13",
"description" : "JNI bindings for Zstd native library that provides fast
and high compression lossless algorithm for Java and all JVM languages.",
"scope" : "optional",
"licenses" : [
{
"license" : {
"id" : "BSD-2-Clause"
}
}
],
"purl" : "pkg:maven/com.github.luben/[email protected]?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "https://github.com/luben/zstd-jni";
}
],
"components" : [
{
"type" : "library",
"bom-ref" : "pkg:github/meta/[email protected]",
"supplier" : {
"name" : "Meta Platforms, Inc.",
"url" : [
"https://github.com/meta";
]
},
"manufacturer" : {
"name" : "Meta Platforms, Inc.",
"url" : [
"https://github.com/meta";
]
},
"name" : "Zstandard",
"version" : "1.5.7",
"description" : "Zstandard - Fast real-time compression algorithm
(native library)",
"licenses" : [
{
"expression" : "BSD-3-Clause OR GPL-2.0-only",
"acknowledgement" : "concluded"
}
],
"cpe" : "cpe:2.3:a:facebook:zstandard:1.5.7:*:*:*:*:*:*:*",
"purl" : "pkg:github/meta/[email protected]",
"externalReferences" : [
{
"type" : "vcs",
"url" : "https://github.com/meta/zstd";
}
]
}
]
}
```
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
