Skip to content

CycloneDX files moved to release profiles#128

Open
dmatej wants to merge 1 commit into
eclipse-ee4j:mainfrom
dmatej:sbom
Open

CycloneDX files moved to release profiles#128
dmatej wants to merge 1 commit into
eclipse-ee4j:mainfrom
dmatej:sbom

Conversation

@dmatej
Copy link
Copy Markdown
Contributor

@dmatej dmatej commented Jun 3, 2026

  • They are not useful for us in development, but they are required to be published to Maven Central.
  • The sbom profile was enabled by default, we had to override it
  • -Dcyclonedx.skip would skip the plugin execution
  • -Dcyclonedx.skipAttach executes the plugin, but doesn't deploy files.
  • Tested locally on GlassFish with -Poss-release or -Pstage-release enable it, in combination with "skips" too.
  • Some docs for the plugin: https://github.com/CycloneDX/cyclonedx-maven-plugin

- They are not useful for us in development, but they are required to be
  published to Maven Central.
- The sbom profile was enabled by default, we had to override it
- -Dcyclonedx.skip would skip the plugin execution
- -Dcyclonedx.skipAttach executes the plugin, but doesn't deploy files.
- Tested locally -Poss-release or -Pstage-release enable it

Signed-off-by: David Matějček <david.matejcek@omnifish.ee>
@dmatej
Copy link
Copy Markdown
Contributor Author

dmatej commented Jun 7, 2026

@KyleAure @ivargrimstad What do you think about this change?

@ivargrimstad
Copy link
Copy Markdown
Member

I'll check it out and merge soon

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants