CycloneDX / CycloneDX/cyclonedx-maven-plugin

Missing dependency in 2.0.0

Open
#54 17 comments 7 reactions 0 assignees View on GitHub
question
Dominant language
Java
Stars
385
Forks
107
Avg merge
17h 31m
Merged PRs (30d)
7

Description

There seems to be a missing dependency in latest release. Since few hours ago we seen a lot of failure on our CIs about invocation of cyclonedx-maven-plugin via cli, like that:

`[ERROR] Failed to execute goal org.cyclonedx:cyclonedx-maven-plugin:2.0.0:makeAggregateBom (default-cli) on project MyProject: Execution default-cli of goal org.cyclonedx:cyclonedx-maven-plugin:2.0.0:makeAggregateBom failed: Plugin org.cyclonedx:cyclonedx-maven-plugin:2.0.0 or one of its dependencies could not be resolved: Could not find artifact com.github.everit-org.json-schema:org.everit.json.schema:jar:1.12.1 in my-mirror (https://nexus.example.com/nexus/repository/my-mirror) -> [Help 1]`

I searched **com.github.everit-org.json-schema:org.everit.json.schema** on search.maven.org and i didn't found it, even for past versions... is groupdId and artifactId correct?

Contributor guide

Open the contributing guide

Research direction

Reproduce the cyclonedx-maven-plugin:2.0.0:makeAggregateBom CLI invocation using the reported error, then inspect the 2.0.0 dependency publication metadata. Done means the plugin's dependency coordinates resolve from a Maven repository and the invocation completes without the reported missing-artifact failure.

Written by the indexing model from the issue text.

Assessment

Tech stack
java
Domain
build-system
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.