diff --git a/pom.xml b/pom.xml index 8f77fdd229..9d3774a1fa 100644 --- a/pom.xml +++ b/pom.xml @@ -531,6 +531,16 @@ + + org.cyclonedx + cyclonedx-maven-plugin + 2.9.3 + + + org.spdx + spdx-maven-plugin + 1.0.4 + @@ -744,7 +754,7 @@ validate skip-checkstyle deploy - docs,apache-release,${nexus-staging-profile} + docs,apache-release,generate-sbom,${nexus-staging-profile} forked-path @@ -1681,6 +1691,48 @@ + + generate-sbom + + + + org.cyclonedx + cyclonedx-maven-plugin + + + package + + makeAggregateBom + + + + + + org.spdx + spdx-maven-plugin + + + build-spdx-v2 + package + + createSPDX + + + + build-spdx-v3 + package + + createSPDX + + + JSON-LD + + + + + + + nexus-staging