CycloneDX / CycloneDX/cyclonedx-maven-plugin

Include Plugins in SBOM generation

Open
#166 3 comments 2 reactions 0 assignees View on GitHub
enhancement
Dominant language
Java
Stars
385
Forks
107
Avg merge
17h 31m
Merged PRs (30d)
7

Description

While generating the SBOM include all the plugins from the project as well. The plugins could also have issues or could be used for component tracking/tracing on where used in projects.

Per @stevespringett
> I think implementation of it would likely have to wait until https://github.com/CycloneDX/specification/issues/31 is implemented in the spec, but we can use Maven plugin case to drive some of the use cases.

_Originally posted by @stevespringett in https://github.com/CycloneDX/cyclonedx-maven-plugin/issues/165#issuecomment-1058419698_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.