You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
I use cyclonedx-maven-plugin to generate SBOM for my multi-module maven project.
Some of my maven module contains a jetty server + a frontend managed with npm, the frontend-build process is execute during the maven build thanks to frontend-maven-plugin.
The frontend build also generate sbom thanks to cyclonedx-node-npm. I'm able to generate this frontend SBOM in corresponding maven${project.build.directory}.
So now ideally, I would like that this bom can be taking into account by cyclonedx-maven-plugin.
Maybe by aggregate it to sbom of the corresponding maven module ?
Do you think this could be in the scope of this project ?
Do you think this make sense to aggregate the frontend SBOM with the maven SBOM when using makeBom goal ? or should it be 2 seperated BOM ?
Do you think this make sense to aggregate the SBOM with makeAggregateBom goal ?
Or do you see better way to make this works together ?
hboutemy
changed the title
Make cyclonedx-maven-plugin works together with frontend-maven-plugin
Make cyclonedx-maven-plugin work together with frontend-maven-pluginMar 23, 2024
I use
cyclonedx-maven-plugin
to generate SBOM for my multi-module maven project.Some of my maven module contains a jetty server + a frontend managed with npm, the frontend-build process is execute during the maven build thanks to
frontend-maven-plugin
.The frontend build also generate sbom thanks to cyclonedx-node-npm. I'm able to generate this frontend SBOM in corresponding maven
${project.build.directory}
.So now ideally, I would like that this bom can be taking into account by
cyclonedx-maven-plugin
.Maybe by aggregate it to sbom of the corresponding maven module ?
makeBom
goal ? or should it be 2 seperated BOM ?makeAggregateBom
goal ?I think this is related to : #395
If you want to include this in
cyclonedx-maven-plugin
I can help. Let me know 🙏The text was updated successfully, but these errors were encountered: