Skip to content

Commit 3a6f805

Browse files
airajenaadamsaghy
authored andcommitted
FINERACT-2164: Add Gradle SBOM (Software Bill of Materials) generator
- Add CycloneDX plugin for SBOM generation (version 3.1.0) - Configure as optional task (not part of default build) - Generate SBOM in CycloneDX format with license information - Usage: ./gradlew :fineract-provider:cyclonedxDirectBom Output: build/reports/cyclonedx-direct/bom.{json,xml}
1 parent 11d6eb9 commit 3a6f805

1 file changed

Lines changed: 11 additions & 0 deletions

File tree

build.gradle

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -119,6 +119,7 @@ plugins {
119119
id 'org.openapi.generator' version '7.8.0' apply false
120120
id 'com.gradleup.shadow' version '8.3.5' apply false
121121
id 'me.champeau.jmh' version '0.7.1' apply false
122+
id 'org.cyclonedx.bom' version '3.1.0' apply false
122123
}
123124

124125
apply from: "${rootDir}/buildSrc/src/main/groovy/org.apache.fineract.release.gradle"
@@ -888,6 +889,16 @@ configure(project.fineractPublishProjects) {
888889
}
889890
}
890891

892+
// Configuration for CycloneDX SBOM generator
893+
// https://github.com/CycloneDX/cyclonedx-gradle-plugin
894+
apply plugin: 'org.cyclonedx.bom'
895+
896+
cyclonedxBom {
897+
projectType = "application"
898+
includeBomSerialNumber = true
899+
includeLicenseText = true
900+
}
901+
891902
task printSourceSetInformation() {
892903
doLast{
893904
sourceSets.each { srcSet ->

0 commit comments

Comments
 (0)