This is an automated email from the ASF dual-hosted git repository.

asf-gitbox-commits pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git

commit 70d9fa688fb87d507ce1b6adef171943a61f6ba4
Author: Stefan Bodewig <[email protected]>
AuthorDate: Sat May 23 17:48:40 2026 +0200

    add jar as nested component to binary distribution SBOMs
---
 build.xml | 18 ++++++++++++++++--
 1 file changed, 16 insertions(+), 2 deletions(-)

diff --git a/build.xml b/build.xml
index 657b67d..f077559 100644
--- a/build.xml
+++ b/build.xml
@@ -365,7 +365,14 @@ under the License.
         distdir="${bin.dist.dir}"
         distbase="${dist.base}"
         binsrc="bin"
-        binarysource="Binary Distribution"/>
+        binarysource="Binary Distribution">
+      <component>
+        <sbomLink>
+          <file file="${bin.dist.dir}/${artifact.stub}-cyclonedx.json"/>
+        </sbomLink>
+        <file file="${bin.dist.dir}/${artifact.stub}.jar"/>
+      </component>
+    </create-tarball-boms>
   </target>
 
   <target name="after-fat-bin-dist" depends="after-dist">
@@ -373,7 +380,14 @@ under the License.
         distdir="${bin.dist.dir}"
         distbase="${dist.base}"
         binsrc="bin-withdeps"
-        binarysource="Binary Distribution Including Dependencies"/>
+        binarysource="Binary Distribution Including Dependencies">
+      <component>
+        <sbomLink>
+          <file file="${bin.dist.dir}/${artifact.stub}-cyclonedx.json"/>
+        </sbomLink>
+        <file file="${bin.dist.dir}/${artifact.stub}.jar"/>
+      </component>
+    </create-tarball-boms>
   </target>
 
   <import file="common/build.xml"/>

Reply via email to