jaikiran commented on code in PR #233:
URL: https://github.com/apache/ant/pull/233#discussion_r3369511021
##########
sboms/ant-1.10.18alpha-cyclonedx.json:
##########
@@ -0,0 +1,355 @@
+{
+ "bomFormat" : "CycloneDX",
+ "specVersion" : "1.6",
+ "serialNumber" : "urn:uuid:2b3c6004-1754-4985-bbf1-27f088f2b856",
+ "version" : 1,
+ "metadata" : {
+ "timestamp" : "2026-06-07T12:52:38Z",
+ "lifecycles" : [
+ {
+ "phase" : "build"
+ }
+ ],
+ "tools" : {
+ "components" : [
+ {
+ "type" : "library",
+ "supplier" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/";
+ ]
+ },
+ "manufacturer" : {
+ "name" : "Apache Ant Project Management Committee",
+ "url" : [
+ "https://ant.apache.org/";
+ ]
+ },
+ "publisher" : "The Apache Software Foundation",
+ "group" : "org.apache.ant",
+ "name" : "ant-cyclonedx",
+ "version" : "0.1",
+ "description" : "Apache CycloneDX Antlib",
+ "licenses" : [
+ {
+ "license" : {
+ "id" : "Apache-2.0",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt";
+ }
+ }
+ ],
+ "purl" : "pkg:maven/org.apache.ant/[email protected]?type=jar",
+ "externalReferences" : [
+ {
+ "type" : "vcs",
+ "url" :
"https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git";
+ },
+ {
+ "type" : "license",
+ "url" : "https://www.apache.org/licenses/LICENSE-2.0.txt";
+ },
+ {
+ "type" : "build-system",
+ "url" :
"https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/";
Review Comment:
Hello Stefan, is the "build-system" type mandated for these SBOM files?
Although `ci-builds.apache.org` is something that is almost guaranteed to be
present (at least in near future). I don't know if we can guarantee that the
jobs referred here are going to be "permanent". We keep changing their names
etc... as and when it pleases us because they are just internal jobs. So I'm
unsure if we should publish this job link in the SBOM.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
