[
https://issues.apache.org/jira/browse/HADOOP-18590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17677917#comment-17677917
]
ASF GitHub Bot commented on HADOOP-18590:
-----------------------------------------
dongjoon-hyun commented on PR #5281:
URL: https://github.com/apache/hadoop/pull/5281#issuecomment-1385941115
> ok, verified the artifacts get into the local mvn repo.
It's great. :)
> i do like the xml version BTW, including all the signatures. makes it
easier to spot tampering, doesn't it?
We already did like the other official Apache artifacts. Please see the
official Apache ORC 1.8.2.
https://repo1.maven.org/maven2/org/apache/orc/orc-core/1.8.2/
> Publish SBOM artifacts
> ----------------------
>
> Key: HADOOP-18590
> URL: https://issues.apache.org/jira/browse/HADOOP-18590
> Project: Hadoop Common
> Issue Type: Improvement
> Components: build
> Affects Versions: 3.4.0
> Reporter: Dongjoon Hyun
> Assignee: Dongjoon Hyun
> Priority: Major
> Labels: pull-request-available
> Fix For: 3.4.0, 3.3.5, 3.2.5
>
>
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
