[jira] [Commented] (HADOOP-18590) Publish SBOM artifacts

[ASF GitHub Bot (Jira)]

    [ 
https://issues.apache.org/jira/browse/HADOOP-18590?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17677917#comment-17677917
 ] 

ASF GitHub Bot commented on HADOOP-18590:
-----------------------------------------

dongjoon-hyun commented on PR #5281:
URL: https://github.com/apache/hadoop/pull/5281#issuecomment-1385941115

   > ok, verified the artifacts get into the local mvn repo. 
   
   It's great. :)
   
   > i do like the xml version BTW, including all the signatures. makes it 
easier to spot tampering, doesn't it?
   
   We already did like the other official Apache artifacts.  Please see the 
official Apache ORC 1.8.2.
   
   ![Screen Shot 2023-01-17 at 11 29 00 
AM](https://user-images.githubusercontent.com/9700541/212994089-ace13389-8139-4d27-bf73-1cdd52fa88ef.png)
   
   https://repo1.maven.org/maven2/org/apache/orc/orc-core/1.8.2/




> Publish SBOM artifacts
> ----------------------
>
>                 Key: HADOOP-18590
>                 URL: https://issues.apache.org/jira/browse/HADOOP-18590
>             Project: Hadoop Common
>          Issue Type: Improvement
>          Components: build
>    Affects Versions: 3.4.0
>            Reporter: Dongjoon Hyun
>            Assignee: Dongjoon Hyun
>            Priority: Major
>              Labels: pull-request-available
>             Fix For: 3.4.0, 3.3.5, 3.2.5
>
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: common-issues-unsubscr...@hadoop.apache.org
For additional commands, e-mail: common-issues-h...@hadoop.apache.org