This is an automated email from the ASF dual-hosted git repository.
coheigea pushed a commit to branch 2_4_x-fixes
in repository https://gitbox.apache.org/repos/asf/ws-wss4j.git
The following commit(s) were added to refs/heads/2_4_x-fixes by this push:
new 931569c4c WSS-705 Add SBOMs to published packages (#212)
931569c4c is described below
commit 931569c4c38f54709319269b059cddbac172a9b0
Author: Colm O hEigeartaigh <cohei...@users.noreply.github.com>
AuthorDate: Tue Oct 10 11:26:41 2023 +0100
WSS-705 Add SBOMs to published packages (#212)
---
pom.xml | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/pom.xml b/pom.xml
index ad88f48ac..1eae9eebb 100644
--- a/pom.xml
+++ b/pom.xml
@@ -194,6 +194,10 @@
<autoVersionSubmodules>true</autoVersionSubmodules>
</configuration>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ </plugin>
</plugins>
<pluginManagement>
<plugins>
@@ -308,6 +312,23 @@
<artifactId>dependency-check-maven</artifactId>
<version>${maven-owasp-plugin-version}</version>
</plugin>
+ <plugin>
+ <groupId>org.cyclonedx</groupId>
+ <artifactId>cyclonedx-maven-plugin</artifactId>
+ <version>2.7.9</version>
+ <executions>
+ <execution>
+ <id>make-bom</id>
+ <phase>package</phase>
+ <goals>
+ <goal>makeAggregateBom</goal>
+ </goals>
+ </execution>
+ </executions>
+ <configuration>
+
<outputName>${project.artifactId}-${project.version}-bom</outputName>
+ </configuration>
+ </plugin>
</plugins>
</pluginManagement>
