[
https://issues.apache.org/jira/browse/FLINK-41232?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
ASF GitHub Bot updated FLINK-41232:
-----------------------------------
Labels: pull-request-available (was: )
> Enable SBOM generation in flink-connector-parent
> ------------------------------------------------
>
> Key: FLINK-41232
> URL: https://issues.apache.org/jira/browse/FLINK-41232
> Project: Flink
> Issue Type: Improvement
> Components: Connectors / Common
> Reporter: Martijn Visser
> Assignee: Martijn Visser
> Priority: Major
> Labels: pull-request-available
>
> Enable cyclonedx-maven-plugin for every connector that inherits the parent:
> - add it to build/plugins;
> - bump it from 2.9.1 to 2.9.3;
> - set includeProvidedScope=false;
> - skip it in the fast profile.
> Provided dependencies are left out for the reason given in ticket 2. For
> connectors that keep Flink artifacts at compile scope by mistake, those
> artifacts will show up as required. Elasticsearch 8, gcp-pubsub, aws kinesis
> and glue, and hive do this today. Each connector should fix that when it
> takes the new parent.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
