CycloneDX / CycloneDX/cyclonedx-maven-plugin
Possible to include commit identifier in BOM?
- Dominant language
- Java
- Stars
- 385
- Forks
- 107
- Avg merge
- 17h 31m
- Merged PRs (30d)
- 7
Description
Hello!
Via the `buildnumber-maven-plugin`, I have access to the SCM revision that was used to produce whatever is in the current BOM. The revision is accessible via the `${buildNumber}` property.
Is there some way to get this information into the produced BOM? I can't see an obvious way to include properties in the BOM, or to include that information in any other way...
Contributor guide
Research direction
Start by tracing how this Maven plugin assembles the produced BOM and how configuration properties are exposed. Investigate whether the `${buildNumber}` SCM revision can be represented in the BOM, then check existing plugin tests and define completion as a generated BOM containing that revision when configured.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java
- Domain
- build-system, tooling
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 35/100