This is an automated email from the ASF dual-hosted git repository.
asf-gitbox-commits pushed a commit to branch support-ivy-as-component-source
in repository https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git
The following commit(s) were added to
refs/heads/support-ivy-as-component-source by this push:
new 43a48db add ivy/commons-codec dependencies in "manual SBOM" as well
43a48db is described below
commit 43a48dbedff2c73105897830e4ade957b1498ed8
Author: Stefan Bodewig <[email protected]>
AuthorDate: Sun Aug 16 08:04:03 2026 +0200
add ivy/commons-codec dependencies in "manual SBOM" as well
---
build.xml | 4 ++-
example/ant-cyclonedx-0.2alpha.cdx.diff | 51 +++++++++++------------------
example/ant-cyclonedx-0.2alpha.cdx.json | 34 ++++++++++---------
example/ant-cyclonedx-0.2alpha.ivy.cdx.json | 32 +++++++++---------
4 files changed, 57 insertions(+), 64 deletions(-)
diff --git a/build.xml b/build.xml
index 15c29b6..79d161a 100644
--- a/build.xml
+++ b/build.xml
@@ -190,6 +190,8 @@ under the License.
<dependency componentRef="ant"/>
<dependency componentRef="ant-launcher"/>
<dependency componentRef="cyclonedx-core"/>
+ <dependency componentRef="commons-codec"/>
+ <dependency componentRef="apache-ivy"/>
</component>
<additionalComponent refid="ant"/>
<additionalComponent refid="ant-launcher"/>
@@ -313,7 +315,7 @@ under the License.
<file file="${lib.dir.compile}/json-schema-validator-2.0.4.jar"/>
<license refid="apache-2"/>
</additionalComponent>
- <additionalComponent>
+ <additionalComponent id="apache-ivy">
<sbomLink>
<url
url="https://repo1.maven.org/maven2/org/apache/ivy/ivy/2.6.0/ivy-2.6.0.cdx.json"/>
</sbomLink>
diff --git a/example/ant-cyclonedx-0.2alpha.cdx.diff
b/example/ant-cyclonedx-0.2alpha.cdx.diff
index b8b809e..da78f27 100644
--- a/example/ant-cyclonedx-0.2alpha.cdx.diff
+++ b/example/ant-cyclonedx-0.2alpha.cdx.diff
@@ -1,5 +1,5 @@
---- ant-cyclonedx-0.2alpha.cdx.json 2026-08-16 07:37:00.362354025 +0200
-+++ ant-cyclonedx-0.2alpha.ivy.cdx.json 2026-08-16 07:36:53.586777324
+0200
+--- ant-cyclonedx-0.2alpha.cdx.json 2026-08-16 08:03:01.398142552 +0200
++++ ant-cyclonedx-0.2alpha.ivy.cdx.json 2026-08-16 08:02:57.645496553
+0200
@@ -253,36 +253,64 @@
"components" : [
{
@@ -347,9 +347,10 @@
- }
- ],
- "purl" :
"pkg:maven/com.jcraft/[email protected]?type=jar",
-- "externalReferences" : [
-- {
-- "type" : "website",
++ "purl" :
"pkg:maven/com.github.package-url/[email protected]?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "website",
- "url" : "http://www.jcraft.com/";
- }
- ]
@@ -416,10 +417,9 @@
- }
- ],
- "purl" : "pkg:maven/com.jcraft/[email protected]?type=jar",
-+ "purl" :
"pkg:maven/com.github.package-url/[email protected]?type=jar",
- "externalReferences" : [
- {
- "type" : "website",
+- "externalReferences" : [
+- {
+- "type" : "website",
- "url" : "http://www.jcraft.com/";
+ "url" : "https://github.com/package-url/packageurl-java";
}
@@ -988,24 +988,24 @@
+ {
+ "alg" : "SHA-512",
+ "content" :
"9a3e79db6666a6096a3021bb2e1d918f30f589d8de51d6b600f8ebd92515a510ae2d8f87919cc2dfa8365d64f10194cac8dfa0fb950160eef0e9da06f6caaeb9"
++ },
++ {
++ "alg" : "SHA3-256",
++ "content" :
"00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
},
{
- "type" : "distribution-intake",
- "url" :
"https://oss.sonatype.org/service/local/staging/deploy/maven2/";
-+ "alg" : "SHA3-256",
-+ "content" :
"00559b4f4066b4917ba4fe2a6f23111eaeada321112d030910d218ced9084b5e"
-+ },
-+ {
+ "alg" : "SHA3-512",
+ "content" :
"9579c2f7e7516e177c2d493ccc9eb8150978cf19f6f09b28d116f6935239fd56dc6af2b62b3336f79b0b462445550cd1fb5377a07001a6f44aaab6a32fa2fa47"
++ },
++ {
++ "alg" : "SHA-384",
++ "content" :
"6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
},
{
- "type" : "build-system",
- "url" : "https://github.com/CycloneDX/cyclonedx-core-java/actions";
-+ "alg" : "SHA-384",
-+ "content" :
"6ea24f814a9b6ece428cfd0535e2f3b8927005745ef61006b50fdb5a90126ee5ea05650155382b3b755c5bce38ef3944"
-+ },
-+ {
+ "alg" : "SHA3-384",
+ "content" :
"9b1015052f0ec43f9be09764e131834157599611cb52f6fe591c4ac6a8ab4817518f2a4b8871e5e738c8678e93af5557"
+ }
@@ -1143,18 +1143,7 @@
"ref" : "pkg:maven/commons-codec/[email protected]?type=jar",
"dependsOn" : [ ]
},
-@@ -1681,8 +1560,10 @@
- {
- "ref" : "pkg:maven/org.apache.ant/[email protected]?type=jar",
- "dependsOn" : [
-+ "pkg:maven/commons-codec/[email protected]?type=jar",
- "pkg:maven/org.apache.ant/[email protected]?type=jar",
- "pkg:maven/org.apache.ant/[email protected]?type=jar",
-+ "pkg:maven/org.apache.ivy/[email protected]?type=jar",
- "pkg:maven/org.cyclonedx/[email protected]?type=jar"
- ]
- },
-@@ -1698,9 +1579,7 @@
+@@ -1700,9 +1579,7 @@
},
{
"ref" :
"pkg:maven/org.apache.commons/[email protected]?type=jar",
@@ -1165,7 +1154,7 @@
},
{
"ref" : "pkg:maven/org.apache.commons/[email protected]?type=jar",
-@@ -1708,20 +1587,7 @@
+@@ -1710,20 +1587,7 @@
},
{
"ref" : "pkg:maven/org.apache.ivy/[email protected]?type=jar",
@@ -1187,7 +1176,7 @@
},
{
"ref" : "pkg:maven/org.codehaus.woodstox/[email protected]?type=jar",
-@@ -1738,6 +1604,14 @@
+@@ -1740,6 +1604,14 @@
"pkg:maven/org.apache.commons/[email protected]?type=jar",
"pkg:maven/org.apache.commons/[email protected]?type=jar"
]
diff --git a/example/ant-cyclonedx-0.2alpha.cdx.json
b/example/ant-cyclonedx-0.2alpha.cdx.json
index 5307f47..fb255e6 100644
--- a/example/ant-cyclonedx-0.2alpha.cdx.json
+++ b/example/ant-cyclonedx-0.2alpha.cdx.json
@@ -34,35 +34,35 @@
"hashes" : [
{
"alg" : "MD5",
- "content" : "ff19edcb045b48fe416334fd6b5b40a2"
+ "content" : "72e87679cb7b25f3b1849c157a006428"
},
{
"alg" : "SHA-1",
- "content" : "899e5a281d8e289c90b8e0f943a69ad13487237f"
+ "content" : "bad777295cc811815c2f82cf554978eabd06908c"
},
{
"alg" : "SHA-256",
- "content" :
"73bcb63a39021cc866f4818cf09cb5cbac58e414d5b8ba19dad7b6628f755b60"
+ "content" :
"6cef1fafc36b884f4be609c20695bf111fc0c4970bb98744f71b6221473026a5"
},
{
"alg" : "SHA-512",
- "content" :
"0c933c2479b4c1a3db6dbb8a2c29b2db580432acf079f543e7689163dde9595e39571c2497c8d8c1c0a133ea4f4808e7bd0d6770d4ee81612a83aac3775dfa7d"
+ "content" :
"eda3b3c30bc628bfab0421548c2b8a8b37fbc79d02723156344bdf4f0c054594ba8bc7a6d6e8776b70af39c89b523513cac7e562741eebdf2ec2fec19983df3f"
},
{
"alg" : "SHA3-256",
- "content" :
"5e3c494ad79c055e31e9f095624336239e1de3186e5bf0fa1c58f75e3fcc97a1"
+ "content" :
"0fca4ccbb30b9a434a7d862e4338429a0ccee1fb48c83f499bbd55a694e43ac2"
},
{
"alg" : "SHA3-512",
- "content" :
"bf3e2e810d97d8f89732123f8bcab0fdf29674a5e45272e298ea69e695c00ba046d0a75659d405559ac899bace07540cf4693d2a6e58e28c04d8e30be551fdfb"
+ "content" :
"e4cecfe5fae3fae96a08417a5999cea4170984c03ac35a720b07eef4ddf53ff64edf84e31d3b01020c46ea0e45cf0ee1870121d0a5935fff5a7edc839f452071"
},
{
"alg" : "SHA-384",
- "content" :
"41645f20d50bc11e048c0b5963fb7f0126d6f5b18b4edf5aa33dbac9aea9e693713a8821bcb2b58f445fab561c64f4cc"
+ "content" :
"f4e5814675b5dbd572abb5a07de3e52d26a30c70e756039d7276d5ec88aa240d63e93f73e04e94ea2fd26ec33e71396a"
},
{
"alg" : "SHA3-384",
- "content" :
"7f6257e7202882b8d2c7758f9b10596489022547f1cc4e924599c75b66c57c520a3b8ec7c55abe984215b88639dd3758"
+ "content" :
"4f4f28ff6b84c8b1993d96b985d68bc52993d2e93f6c40dcc2bb33a9bc0b22c2a60fc5f888dcaa0ebf2f6752ead7302f"
}
],
"licenses" : [
@@ -146,35 +146,35 @@
"hashes" : [
{
"alg" : "MD5",
- "content" : "ff19edcb045b48fe416334fd6b5b40a2"
+ "content" : "72e87679cb7b25f3b1849c157a006428"
},
{
"alg" : "SHA-1",
- "content" : "899e5a281d8e289c90b8e0f943a69ad13487237f"
+ "content" : "bad777295cc811815c2f82cf554978eabd06908c"
},
{
"alg" : "SHA-256",
- "content" :
"73bcb63a39021cc866f4818cf09cb5cbac58e414d5b8ba19dad7b6628f755b60"
+ "content" :
"6cef1fafc36b884f4be609c20695bf111fc0c4970bb98744f71b6221473026a5"
},
{
"alg" : "SHA-512",
- "content" :
"0c933c2479b4c1a3db6dbb8a2c29b2db580432acf079f543e7689163dde9595e39571c2497c8d8c1c0a133ea4f4808e7bd0d6770d4ee81612a83aac3775dfa7d"
+ "content" :
"eda3b3c30bc628bfab0421548c2b8a8b37fbc79d02723156344bdf4f0c054594ba8bc7a6d6e8776b70af39c89b523513cac7e562741eebdf2ec2fec19983df3f"
},
{
"alg" : "SHA3-256",
- "content" :
"5e3c494ad79c055e31e9f095624336239e1de3186e5bf0fa1c58f75e3fcc97a1"
+ "content" :
"0fca4ccbb30b9a434a7d862e4338429a0ccee1fb48c83f499bbd55a694e43ac2"
},
{
"alg" : "SHA3-512",
- "content" :
"bf3e2e810d97d8f89732123f8bcab0fdf29674a5e45272e298ea69e695c00ba046d0a75659d405559ac899bace07540cf4693d2a6e58e28c04d8e30be551fdfb"
+ "content" :
"e4cecfe5fae3fae96a08417a5999cea4170984c03ac35a720b07eef4ddf53ff64edf84e31d3b01020c46ea0e45cf0ee1870121d0a5935fff5a7edc839f452071"
},
{
"alg" : "SHA-384",
- "content" :
"41645f20d50bc11e048c0b5963fb7f0126d6f5b18b4edf5aa33dbac9aea9e693713a8821bcb2b58f445fab561c64f4cc"
+ "content" :
"f4e5814675b5dbd572abb5a07de3e52d26a30c70e756039d7276d5ec88aa240d63e93f73e04e94ea2fd26ec33e71396a"
},
{
"alg" : "SHA3-384",
- "content" :
"7f6257e7202882b8d2c7758f9b10596489022547f1cc4e924599c75b66c57c520a3b8ec7c55abe984215b88639dd3758"
+ "content" :
"4f4f28ff6b84c8b1993d96b985d68bc52993d2e93f6c40dcc2bb33a9bc0b22c2a60fc5f888dcaa0ebf2f6752ead7302f"
}
],
"licenses" : [
@@ -1681,8 +1681,10 @@
{
"ref" : "pkg:maven/org.apache.ant/[email protected]?type=jar",
"dependsOn" : [
+ "pkg:maven/commons-codec/[email protected]?type=jar",
"pkg:maven/org.apache.ant/[email protected]?type=jar",
"pkg:maven/org.apache.ant/[email protected]?type=jar",
+ "pkg:maven/org.apache.ivy/[email protected]?type=jar",
"pkg:maven/org.cyclonedx/[email protected]?type=jar"
]
},
diff --git a/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
b/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
index 39a761d..4f33b56 100644
--- a/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
+++ b/example/ant-cyclonedx-0.2alpha.ivy.cdx.json
@@ -34,35 +34,35 @@
"hashes" : [
{
"alg" : "MD5",
- "content" : "ff19edcb045b48fe416334fd6b5b40a2"
+ "content" : "72e87679cb7b25f3b1849c157a006428"
},
{
"alg" : "SHA-1",
- "content" : "899e5a281d8e289c90b8e0f943a69ad13487237f"
+ "content" : "bad777295cc811815c2f82cf554978eabd06908c"
},
{
"alg" : "SHA-256",
- "content" :
"73bcb63a39021cc866f4818cf09cb5cbac58e414d5b8ba19dad7b6628f755b60"
+ "content" :
"6cef1fafc36b884f4be609c20695bf111fc0c4970bb98744f71b6221473026a5"
},
{
"alg" : "SHA-512",
- "content" :
"0c933c2479b4c1a3db6dbb8a2c29b2db580432acf079f543e7689163dde9595e39571c2497c8d8c1c0a133ea4f4808e7bd0d6770d4ee81612a83aac3775dfa7d"
+ "content" :
"eda3b3c30bc628bfab0421548c2b8a8b37fbc79d02723156344bdf4f0c054594ba8bc7a6d6e8776b70af39c89b523513cac7e562741eebdf2ec2fec19983df3f"
},
{
"alg" : "SHA3-256",
- "content" :
"5e3c494ad79c055e31e9f095624336239e1de3186e5bf0fa1c58f75e3fcc97a1"
+ "content" :
"0fca4ccbb30b9a434a7d862e4338429a0ccee1fb48c83f499bbd55a694e43ac2"
},
{
"alg" : "SHA3-512",
- "content" :
"bf3e2e810d97d8f89732123f8bcab0fdf29674a5e45272e298ea69e695c00ba046d0a75659d405559ac899bace07540cf4693d2a6e58e28c04d8e30be551fdfb"
+ "content" :
"e4cecfe5fae3fae96a08417a5999cea4170984c03ac35a720b07eef4ddf53ff64edf84e31d3b01020c46ea0e45cf0ee1870121d0a5935fff5a7edc839f452071"
},
{
"alg" : "SHA-384",
- "content" :
"41645f20d50bc11e048c0b5963fb7f0126d6f5b18b4edf5aa33dbac9aea9e693713a8821bcb2b58f445fab561c64f4cc"
+ "content" :
"f4e5814675b5dbd572abb5a07de3e52d26a30c70e756039d7276d5ec88aa240d63e93f73e04e94ea2fd26ec33e71396a"
},
{
"alg" : "SHA3-384",
- "content" :
"7f6257e7202882b8d2c7758f9b10596489022547f1cc4e924599c75b66c57c520a3b8ec7c55abe984215b88639dd3758"
+ "content" :
"4f4f28ff6b84c8b1993d96b985d68bc52993d2e93f6c40dcc2bb33a9bc0b22c2a60fc5f888dcaa0ebf2f6752ead7302f"
}
],
"licenses" : [
@@ -146,35 +146,35 @@
"hashes" : [
{
"alg" : "MD5",
- "content" : "ff19edcb045b48fe416334fd6b5b40a2"
+ "content" : "72e87679cb7b25f3b1849c157a006428"
},
{
"alg" : "SHA-1",
- "content" : "899e5a281d8e289c90b8e0f943a69ad13487237f"
+ "content" : "bad777295cc811815c2f82cf554978eabd06908c"
},
{
"alg" : "SHA-256",
- "content" :
"73bcb63a39021cc866f4818cf09cb5cbac58e414d5b8ba19dad7b6628f755b60"
+ "content" :
"6cef1fafc36b884f4be609c20695bf111fc0c4970bb98744f71b6221473026a5"
},
{
"alg" : "SHA-512",
- "content" :
"0c933c2479b4c1a3db6dbb8a2c29b2db580432acf079f543e7689163dde9595e39571c2497c8d8c1c0a133ea4f4808e7bd0d6770d4ee81612a83aac3775dfa7d"
+ "content" :
"eda3b3c30bc628bfab0421548c2b8a8b37fbc79d02723156344bdf4f0c054594ba8bc7a6d6e8776b70af39c89b523513cac7e562741eebdf2ec2fec19983df3f"
},
{
"alg" : "SHA3-256",
- "content" :
"5e3c494ad79c055e31e9f095624336239e1de3186e5bf0fa1c58f75e3fcc97a1"
+ "content" :
"0fca4ccbb30b9a434a7d862e4338429a0ccee1fb48c83f499bbd55a694e43ac2"
},
{
"alg" : "SHA3-512",
- "content" :
"bf3e2e810d97d8f89732123f8bcab0fdf29674a5e45272e298ea69e695c00ba046d0a75659d405559ac899bace07540cf4693d2a6e58e28c04d8e30be551fdfb"
+ "content" :
"e4cecfe5fae3fae96a08417a5999cea4170984c03ac35a720b07eef4ddf53ff64edf84e31d3b01020c46ea0e45cf0ee1870121d0a5935fff5a7edc839f452071"
},
{
"alg" : "SHA-384",
- "content" :
"41645f20d50bc11e048c0b5963fb7f0126d6f5b18b4edf5aa33dbac9aea9e693713a8821bcb2b58f445fab561c64f4cc"
+ "content" :
"f4e5814675b5dbd572abb5a07de3e52d26a30c70e756039d7276d5ec88aa240d63e93f73e04e94ea2fd26ec33e71396a"
},
{
"alg" : "SHA3-384",
- "content" :
"7f6257e7202882b8d2c7758f9b10596489022547f1cc4e924599c75b66c57c520a3b8ec7c55abe984215b88639dd3758"
+ "content" :
"4f4f28ff6b84c8b1993d96b985d68bc52993d2e93f6c40dcc2bb33a9bc0b22c2a60fc5f888dcaa0ebf2f6752ead7302f"
}
],
"licenses" : [
