FINERACT-2164: Add Gradle SBOM (Software Bill of Materials) generator
- Add CycloneDX plugin for SBOM generation (version 3.1.0)
- Configure as optional task (not part of default build)
- Generate SBOM in CycloneDX format with license information
- Usage: ./gradlew :fineract-provider:cyclonedxDirectBom
Output: build/reports/cyclonedx-direct/bom.{json,xml}
This commit is contained in:
@@ -119,6 +119,7 @@ plugins {
|
||||
id 'org.openapi.generator' version '7.8.0' apply false
|
||||
id 'com.gradleup.shadow' version '8.3.5' apply false
|
||||
id 'me.champeau.jmh' version '0.7.1' apply false
|
||||
id 'org.cyclonedx.bom' version '3.1.0' apply false
|
||||
}
|
||||
|
||||
apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle"
|
||||
@@ -888,6 +889,16 @@ configure(project.fineractPublishProjects) {
|
||||
}
|
||||
}
|
||||
|
||||
// Configuration for CycloneDX SBOM generator
|
||||
// https://github.com/CycloneDX/cyclonedx-gradle-plugin
|
||||
apply plugin: 'org.cyclonedx.bom'
|
||||
|
||||
cyclonedxBom {
|
||||
projectType = "application"
|
||||
includeBomSerialNumber = true
|
||||
includeLicenseText = true
|
||||
}
|
||||
|
||||
task printSourceSetInformation() {
|
||||
doLast{
|
||||
sourceSets.each { srcSet ->
|
||||
|
||||
Reference in New Issue
Block a user