FINERACT-2164: Add Gradle SBOM (Software Bill of Materials) generator

- Add CycloneDX plugin for SBOM generation (version 3.1.0)
- Configure as optional task (not part of default build)
- Generate SBOM in CycloneDX format with license information
- Usage: ./gradlew :fineract-provider:cyclonedxDirectBom

Output: build/reports/cyclonedx-direct/bom.{json,xml}
This commit is contained in:
airajena
2026-01-19 15:00:40 +01:00
committed by Adam Saghy
parent 11d6eb9f2d
commit 3a6f805d50
+11
View File
@@ -119,6 +119,7 @@ plugins {
id 'org.openapi.generator' version '7.8.0' apply false
id 'com.gradleup.shadow' version '8.3.5' apply false
id 'me.champeau.jmh' version '0.7.1' apply false
id 'org.cyclonedx.bom' version '3.1.0' apply false
}
apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle"
@@ -888,6 +889,16 @@ configure(project.fineractPublishProjects) {
}
}
// Configuration for CycloneDX SBOM generator
// https://github.com/CycloneDX/cyclonedx-gradle-plugin
apply plugin: 'org.cyclonedx.bom'
cyclonedxBom {
projectType = "application"
includeBomSerialNumber = true
includeLicenseText = true
}
task printSourceSetInformation() {
doLast{
sourceSets.each { srcSet ->