feat(maven): generate and attach CycloneDX SBOM to the project artifacts

smallrye · Sep 26, 2023 · 27a9111 · 27a9111
1 parent 2633f79
commit 27a9111
Show file tree

Hide file tree

Showing 6 changed files with 34 additions and 0 deletions.
diff --git a/implementation/pom.xml b/implementation/pom.xml
@@ -123,6 +123,10 @@
                 <groupId>org.revapi</groupId>
                 <artifactId>revapi-maven-plugin</artifactId>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 

diff --git a/kotlin/pom.xml b/kotlin/pom.xml
@@ -111,6 +111,10 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 

diff --git a/math/pom.xml b/math/pom.xml
@@ -79,6 +79,10 @@
                 <groupId>org.revapi</groupId>
                 <artifactId>revapi-maven-plugin</artifactId>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 

diff --git a/pom.xml b/pom.xml
@@ -118,6 +118,7 @@
         <jandex-maven-plugin.version>1.2.3</jandex-maven-plugin.version>
         <find-and-replace-maven-plugin.version>1.1.0</find-and-replace-maven-plugin.version>
         <jreleaser-maven-plugin.version>1.8.0</jreleaser-maven-plugin.version>
+        <cyclonedx-maven-plugin.version>2.7.9</cyclonedx-maven-plugin.version>
     </properties>
 
     <dependencyManagement>
@@ -376,6 +377,19 @@
                     <artifactId>find-and-replace-maven-plugin</artifactId>
                     <version>${find-and-replace-maven-plugin.version}</version>
                 </plugin>
+                <plugin>
+                    <groupId>org.cyclonedx</groupId>
+                    <artifactId>cyclonedx-maven-plugin</artifactId>
+                    <version>${cyclonedx-maven-plugin.version}</version>
+                    <executions>
+                        <execution>
+                            <phase>package</phase>
+                            <goals>
+                                <goal>makeBom</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>

diff --git a/reactor/pom.xml b/reactor/pom.xml
@@ -61,6 +61,10 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 </project>
diff --git a/rxjava3/pom.xml b/rxjava3/pom.xml
@@ -60,6 +60,10 @@
                     </execution>
                 </executions>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 </project>