slawekjaranowski opened a new issue, #1544: URL: https://github.com/apache/tooling-trusted-releases/issues/1544
Hi, Next release with SBOM generate by Maven project Release https://releases.apache.org/vote/tooling-atr-maven-plugin/1.0.0-beta-1 I see for release artifact `atr-maven-plugin-1.0.0-beta-1-source-release.zip` > Could not locate a matching SBOM I heve uploaded `atr-maven-plugin-1.0.0-beta-1-cyclonedx.json` and for it I see > atr-maven-plugin-1.0.0-beta-1-cyclonedx.json: Metadata file exists but no corresponding artifact with base 'atr-maven-plugin-1.0.0-beta-1' was found For SBOM https://releases.apache.org/sbom/quality/tooling-atr-maven-plugin/1.0.0-beta-1/atr-maven-plugin-1.0.0-beta-1-cyclonedx.json I see: ``` Conformance report Errors Kind Property Count MISSING_COMPONENT_PROPERTY SUPPLIER 36 MISSING_PROPERTY METADATA_AUTHOR_OR_MANUFACTURER 1 MISSING_PROPERTY METADATA_SUPPLIER 1 MISSING_PROPERTY METADATA_TIMESTAMP 1 ``` SBOM was generate by https://github.com/CycloneDX/cyclonedx-maven-plugin -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
