https://jira.opendaylight.org This file is an XML representation of an issue en-us 8.20.10 820010 22-06-2022 https://jira.opendaylight.org/browse/ODLPARENT-280 odlparent <p>As part of improving OpenDaylight's inputs into supply chain security, generate an SBOM for all artifacts built by maven, so they can be signed and published to Maven Central.</p> ODLPARENT-280

Generate an SBOM for artifacts

New Feature Medium Resolved Done Robert Varga Robert Varga Thu, 24 Feb 2022 08:07:04 +0000 Thu, 20 Oct 2022 10:46:02 +0000 Thu, 24 Feb 2022 10:46:34 +0000 10.0.0 9.0.16 General 0 1 <p>Integrating cyclonedx-maven-plugin seems super easy.</p> <p>The metadata seems to be properly attached to build artifacts and signed by Sigul in stage jobs. Unless something crops up, this job is done.</p> Development Rank 0|i041mv: