Add SBOM support (#79)

eclipse · Nov 2, 2023 · 87cac5b · 87cac5b
1 parent add91ca
commit 87cac5b
Showing 1 changed file with 34 additions and 2 deletions.
diff --git a/pom.xml b/pom.xml
@@ -69,6 +69,8 @@
         <version.plugin.release>3.0.0-M7</version.plugin.release>
         <version.plugin.gpg>3.0.1</version.plugin.gpg>
         <version.plugin.staging>1.6.13</version.plugin.staging>
+        <!--SBOM generation -->
+        <version.plugin.cyclonedx>2.7.9</version.plugin.cyclonedx>
 
         <!-- General Properties -->
         <skipChecks>false</skipChecks>
@@ -508,8 +510,7 @@
                             </configuration>
                         </execution>
                     </executions>
-                </plugin>
-
+                </plugin> 
                 <!-- Release -->
                 <plugin>
                     <groupId>org.apache.maven.plugins</groupId>
@@ -1089,6 +1090,37 @@
                 <tck.license>eftckl-1.0</tck.license>
             </properties>
         </profile>
+
+        <!--SBOM-->
+        <profile>
+            <!-- Generates SBOM. Skip with '-DskipSBOM'.-->
+                <id>sbom</id>
+                <activation>
+                  <property>
+                    <name>!skipSBOM</name>
+                  </property>
+                </activation>
+                <build>
+                    <plugins>
+                        <plugin>
+                            <groupId>org.cyclonedx</groupId>
+                            <artifactId>cyclonedx-maven-plugin</artifactId>
+                            <configuration>
+                                <schemaVersion>1.4</schemaVersion>
+                                <projectType>library</projectType>
+                            </configuration>
+                            <executions>
+                                <execution>
+                                    <phase>package</phase>
+                                    <goals>
+                                        <goal>makeAggregateBom</goal>
+                                    </goals>
+                                </execution>
+                            </executions>
+                        </plugin>
+                    </plugins>
+                </build>
+            </profile>
     </profiles>
 
     <modules>