HADOOP-18590. Publish SBOM artifacts (#5281)

Signed-off-by: Chris Nauroth <cnauroth@apache.org>
(cherry picked from commit 6f99558c2e)
This commit is contained in:
Dongjoon Hyun 2023-01-09 16:41:06 -08:00 committed by Chris Nauroth
parent f856611121
commit b6fd322307

18
pom.xml
View File

@ -116,6 +116,7 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<dependency-check-maven.version>1.4.3</dependency-check-maven.version>
<spotbugs.version>4.2.2</spotbugs.version>
<spotbugs-maven-plugin.version>4.2.0</spotbugs-maven-plugin.version>
<cyclonedx.version>2.7.3</cyclonedx.version>
<shell-executable>bash</shell-executable>
@ -379,6 +380,19 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
</dependency>
</dependencies>
</plugin>
<plugin>
<groupId>org.cyclonedx</groupId>
<artifactId>cyclonedx-maven-plugin</artifactId>
<version>${cyclonedx.version}</version>
<executions>
<execution>
<phase>package</phase>
<goals>
<goal>makeBom</goal>
</goals>
</execution>
</executions>
</plugin>
</plugins>
</pluginManagement>
@ -486,6 +500,10 @@ xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 https://maven.apache.org/x
<groupId>com.github.spotbugs</groupId>
<artifactId>spotbugs-maven-plugin</artifactId>
</plugin>
<plugin>
<groupId>org.cyclonedx</groupId>
<artifactId>cyclonedx-maven-plugin</artifactId>
</plugin>
</plugins>
</build>