@Jess - Thanks for the great news! @Muddasar S Ahmed <[email protected]> - Please let us know how the new version works for the ONAP projects that were affected by the transitive dependencies issue.
Regards, Ranny. On Wed, Jul 13, 2022 at 12:15 PM Jessica Wagantall < [email protected]> wrote: > Dear ONAP team > > I would like to let you know that our *SPDX SBOM generator *tool has been > upgraded! > The new *v0.0.15* release includes a new feature to allows the tool to > accept a custom > maven settings file which is used to resolve transitive dependencies, > hence fixing the > issues we were facing. > To view more details, please look into: > > https://github.com/opensbom-generator/spdx-sbom-generator/releases/tag/v0.0.15 > > Here is an example on how the tool works in the maven stage job: > > https://jenkins.onap.org/job/dcaegen2-collectors-ves-maven-stage-master/1141/ > The report generated can be found in the artifacts: > > https://logs.onap.org/production/vex-yul-ecomp-jenkins-1/dcaegen2-collectors-ves-maven-stage-master/1141/sbom-dcaegen2-collectors-ves-maven-stage-master > > Please let me know if you have any questions > Thanks a ton! > Jess > > > -=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#24087): https://lists.onap.org/g/onap-discuss/message/24087 Mute This Topic: https://lists.onap.org/mt/92364802/21656 Group Owner: [email protected] Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
