[jira] [Commented] (GROOVY-10993) Consider adding CycloneDX SBOM files

[ASF GitHub Bot (Jira)]

    [ 
https://issues.apache.org/jira/browse/GROOVY-10993?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17854527#comment-17854527
 ] 

ASF GitHub Bot commented on GROOVY-10993:
-----------------------------------------

codecov-commenter commented on PR #2092:
URL: https://github.com/apache/groovy/pull/2092#issuecomment-2163823738

   ## 
[Codecov](https://app.codecov.io/gh/apache/groovy/pull/2092?dropdown=coverage&src=pr&el=h1&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
 Report
   All modified and coverable lines are covered by tests :white_check_mark:
   > Project coverage is 68.6274%. Comparing base 
[(`6cd477b`)](https://app.codecov.io/gh/apache/groovy/commit/6cd477b3157675f0ceee9fbd62e3efd0cc9bdb3e?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
 to head 
[(`13cf8ea`)](https://app.codecov.io/gh/apache/groovy/commit/13cf8ea457ac4449ce15d582df8491b9113b4182?dropdown=coverage&el=desc&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache).
   > Report is 97 commits behind head on master.
   
   <details><summary>Additional details and impacted files</summary>
   
   
   [![Impacted file tree 
graph](https://app.codecov.io/gh/apache/groovy/pull/2092/graphs/tree.svg?width=650&height=150&src=pr&token=1r45138NfQ&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)](https://app.codecov.io/gh/apache/groovy/pull/2092?src=pr&el=tree&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
   
   ```diff
   @@                Coverage Diff                 @@
   ##               master      #2092        +/-   ##
   ==================================================
   + Coverage     68.5957%   68.6274%   +0.0318%     
   - Complexity      29233      29327        +94     
   ==================================================
     Files            1426       1426                
     Lines          113494     113628       +134     
     Branches        19548      19601        +53     
   ==================================================
   + Hits            77852      77980       +128     
     Misses          29088      29088                
   - Partials         6554       6560         +6     
   ```
   
   
   [see 36 files with indirect coverage 
changes](https://app.codecov.io/gh/apache/groovy/pull/2092/indirect-changes?src=pr&el=tree-more&utm_medium=referral&utm_source=github&utm_content=comment&utm_campaign=pr+comments&utm_term=apache)
   
   </details>




> Consider adding CycloneDX SBOM files
> ------------------------------------
>
>                 Key: GROOVY-10993
>                 URL: https://issues.apache.org/jira/browse/GROOVY-10993
>             Project: Groovy
>          Issue Type: Improvement
>            Reporter: Paul King
>            Assignee: Paul King
>            Priority: Major
>
> We should consider adding SBOM file(s) into our releases. SBOM files capture 
> dependency metadata somewhat like pom or bom files but focus on security.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)