HADOOP-18590. Publish SBOM artifacts (#5555). Contributed by Dongjoon Hyun.

This commit is contained in:
Dongjoon Hyun 2023-04-15 09:05:43 -07:00 committed by Ayush Saxena
parent f324efd247
commit 854eddb0cc
No known key found for this signature in database
GPG Key ID: D09AE71061AB564D
1 changed files with 25 additions and 0 deletions

25
pom.xml
View File

@ -116,6 +116,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<dependency-check-maven.version>1.4.3</dependency-check-maven.version>
<spotbugs.version>4.2.2</spotbugs.version>
<spotbugs-maven-plugin.version>4.2.0</spotbugs-maven-plugin.version>
<cyclonedx.version>2.7.6</cyclonedx.version>
<shell-executable>bash</shell-executable>
@ -494,6 +495,10 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-maven-plugin</artifactId>
</plugin>
<plugin>
<groupId>org.cyclonedx</groupId>
<artifactId>cyclonedx-maven-plugin</artifactId>
</plugin>
</plugins>
</build>
@ -635,6 +640,26 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
</build>
</profile>
<profile>
<id>dist</id>
<build>
<plugins>
<plugin>
<groupId>org.cyclonedx</groupId>
<artifactId>cyclonedx-maven-plugin</artifactId>
<version>${cyclonedx.version}</version>
<executions>
<execution>
<phase>package</phase>
<goals>
<goal>makeBom</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</build>
</profile>
<profile>
<id>sign</id>