[ee4j-pmc] SBOM Generation

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [List Home]

[ee4j-pmc] SBOM Generation

From: Ivar Grimstad <ivar.grimstad@xxxxxxxxxxxxxxxxxxxxxx>
Date: Wed, 25 Oct 2023 13:38:30 +0200
Delivered-to: ee4j-pmc@xxxxxxxxxxx
List-archive: <https://www.eclipse.org/mailman/private/ee4j-pmc/>
List-help: <mailto:ee4j-pmc-request@eclipse.org?subject=help>
List-subscribe: <https://www.eclipse.org/mailman/listinfo/ee4j-pmc>, <mailto:ee4j-pmc-request@eclipse.org?subject=subscribe>
List-unsubscribe: <https://www.eclipse.org/mailman/options/ee4j-pmc>, <mailto:ee4j-pmc-request@eclipse.org?subject=unsubscribe>

Hi,

I have added configuration for automatically generating SBOMs for all EE4J projects in the parent pom. If a project wants to opt out of the generation, it can be done by using the -DskipSBOM switch.

Pull Request:

https://github.com/eclipse-ee4j/ee4j/pull/87

The documentation from the EMO regarding SBOM Best practices for Eclipse Projects can be found here:

https://gitlab.eclipse.org/eclipsefdn/emo-team/sbom

If there are no objections, I would like to proceed with merging the PR, stage, and release the parent pom after testing it out in CI for a couple of specifications and implementation projects.

Ivar

Ivar Grimstad

Jakarta EE Developer Advocate | Eclipse Foundation

Join Community Day for Java Developers - October 16, 2023 (only €40)

EclipseCon 2023 - October 16-19, 2023

Prev by Date: [ee4j-pmc] PMC Approval required for Project Lead election for David Matějček on Eclipse GlassFish®
Next by Date: [ee4j-pmc] Parent POM version 1.0.9 released - with SBOM generation
Previous by thread: [ee4j-pmc] PMC Approval required for Project Lead election for David Matějček on Eclipse GlassFish®
Next by thread: [ee4j-pmc] Parent POM version 1.0.9 released - with SBOM generation
Index(es):
- Date
- Thread

Breadcrumbs