RATIS-2110. Publish SBOM artifacts (#1110)

apache · Jun 25, 2024 · 19ead39 · 19ead39
1 parent 34fa62c
commit 19ead39
Show file tree

Hide file tree

Showing 2 changed files with 28 additions and 0 deletions.
diff --git a/pom.xml b/pom.xml
@@ -189,6 +189,7 @@
 
     <protobuf-maven-plugin.version>0.6.1</protobuf-maven-plugin.version>
     <copy-rename-maven-plugin.version>1.0</copy-rename-maven-plugin.version>
+    <cyclonedx.version>2.8.0</cyclonedx.version>
 
     <spotbugs.version>4.2.1</spotbugs.version>
     <spotbugs-plugin.version>4.2.0</spotbugs-plugin.version>
@@ -724,6 +725,11 @@
           <artifactId>jacoco-maven-plugin</artifactId>
           <version>${jacoco.version}</version>
         </plugin>
+        <plugin>
+          <groupId>org.cyclonedx</groupId>
+          <artifactId>cyclonedx-maven-plugin</artifactId>
+          <version>${cyclonedx.version}</version>
+        </plugin>
       </plugins>
     </pluginManagement>
 
@@ -1055,6 +1061,18 @@
               </execution>
             </executions>
           </plugin>
+          <plugin>
+            <groupId>org.cyclonedx</groupId>
+            <artifactId>cyclonedx-maven-plugin</artifactId>
+            <executions>
+              <execution>
+                <phase>package</phase>
+                <goals>
+                  <goal>makeAggregateBom</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
         </plugins>
       </build>
     </profile>

diff --git a/ratis-assembly/src/main/assembly/bin.xml b/ratis-assembly/src/main/assembly/bin.xml
@@ -63,6 +63,16 @@
       </includes>
       <fileMode>0644</fileMode>
     </fileSet>
+    <!-- aggregate BOM from root module -->
+    <fileSet>
+      <directory>${project.basedir}/../target</directory>
+      <outputDirectory>.</outputDirectory>
+      <includes>
+        <include>bom.json</include>
+        <include>bom.xml</include>
+      </includes>
+      <fileMode>0644</fileMode>
+    </fileSet>
     <fileSet>
       <directory>${project.basedir}/../ratis-docs/target/classes/docs
       </directory>