FINERACT-2164: Add Gradle SBOM (Software Bill of Materials) generator

- Add CycloneDX plugin for SBOM generation (version 3.1.0)
- Configure as optional task (not part of default build)
- Generate SBOM in CycloneDX format with license information
- Usage: ./gradlew :fineract-provider:cyclonedxDirectBom

Output: build/reports/cyclonedx-direct/bom.{json,xml}
This commit is contained in:
airajena
2026-01-19 15:00:40 +01:00
committed by Adam Saghy
parent 11d6eb9f2d
commit 3a6f805d50
+11
View File
@@ -119,6 +119,7 @@ plugins {
id 'org.openapi.generator' version '7.8.0' apply false id 'org.openapi.generator' version '7.8.0' apply false
id 'com.gradleup.shadow' version '8.3.5' apply false id 'com.gradleup.shadow' version '8.3.5' apply false
id 'me.champeau.jmh' version '0.7.1' apply false id 'me.champeau.jmh' version '0.7.1' apply false
id 'org.cyclonedx.bom' version '3.1.0' apply false
} }
apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle" apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle"
@@ -888,6 +889,16 @@ configure(project.fineractPublishProjects) {
} }
} }
// Configuration for CycloneDX SBOM generator
// https://github.com/CycloneDX/cyclonedx-gradle-plugin
apply plugin: 'org.cyclonedx.bom'
cyclonedxBom {
projectType = "application"
includeBomSerialNumber = true
includeLicenseText = true
}
task printSourceSetInformation() { task printSourceSetInformation() {
doLast{ doLast{
sourceSets.each { srcSet -> sourceSets.each { srcSet ->