Dear ONAP team I would like to let you know that our *SPDX SBOM generator *tool has been upgraded! The new *v0.0.15* release includes a new feature to allows the tool to accept a custom maven settings file which is used to resolve transitive dependencies, hence fixing the issues we were facing. To view more details, please look into: https://github.com/opensbom-generator/spdx-sbom-generator/releases/tag/v0.0.15
Here is an example on how the tool works in the maven stage job: https://jenkins.onap.org/job/dcaegen2-collectors-ves-maven-stage-master/1141/ The report generated can be found in the artifacts: https://logs.onap.org/production/vex-yul-ecomp-jenkins-1/dcaegen2-collectors-ves-maven-stage-master/1141/sbom-dcaegen2-collectors-ves-maven-stage-master Please let me know if you have any questions Thanks a ton! Jess -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#24083): https://lists.onap.org/g/onap-discuss/message/24083 Mute This Topic: https://lists.onap.org/mt/92364802/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
