[
https://issues.apache.org/jira/browse/HADOOP-18590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17656486#comment-17656486
]
ASF GitHub Bot commented on HADOOP-18590:
-----------------------------------------
steveloughran commented on PR #5281:
URL: https://github.com/apache/hadoop/pull/5281#issuecomment-1376861853
How does this work for shaded things the Hadoop build itself pulls in?
IMO this BOM should somehow be included in the released JARs as some well
known resource name to allow some introspection at runtime....
> Publish SBOM artifacts
> ----------------------
>
> Key: HADOOP-18590
> URL: https://issues.apache.org/jira/browse/HADOOP-18590
> Project: Hadoop Common
> Issue Type: Improvement
> Components: build
> Affects Versions: 3.4.0
> Reporter: Dongjoon Hyun
> Assignee: Dongjoon Hyun
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.4.0, 3.2.5, 3.3.9
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
