@cyclonedx/cdxgen 8.2.3 → 8.2.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -0
- package/index.js +5 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -270,6 +270,8 @@ cdxgen can retain the dependency tree under the `dependencies` attribute for a s
|
|
|
270
270
|
| SBOM_SIGN_ALGORITHM | Signature algorithm. Some valid values are RS256, RS384, RS512, PS256, PS384, PS512, ES256 etc |
|
|
271
271
|
| SBOM_SIGN_PRIVATE_KEY | Private key to use for signing |
|
|
272
272
|
| SBOM_SIGN_PUBLIC_KEY | Optional. Public key to include in the SBoM signature |
|
|
273
|
+
| CDX_MAVEN_PLUGIN | CycloneDX Maven plugin to use. Default "org.cyclonedx:cyclonedx-maven-plugin:2.7.6" |
|
|
274
|
+
| CDX_MAVEN_GOAL | CycloneDX Maven plugin goal to use. Default makeAggregateBom. Other options: makeBom, makePackageBom |
|
|
273
275
|
|
|
274
276
|
## Plugins
|
|
275
277
|
|
package/index.js
CHANGED
|
@@ -986,10 +986,11 @@ const createJavaBom = async (path, options) => {
|
|
|
986
986
|
(options.multiProject ? "**/" : "") + "pom.xml"
|
|
987
987
|
);
|
|
988
988
|
if (pomFiles && pomFiles.length) {
|
|
989
|
-
|
|
990
|
-
|
|
991
|
-
"-
|
|
992
|
-
|
|
989
|
+
const cdxMavenPlugin =
|
|
990
|
+
process.env.CDX_MAVEN_PLUGIN ||
|
|
991
|
+
"org.cyclonedx:cyclonedx-maven-plugin:2.7.6";
|
|
992
|
+
const cdxMavenGoal = process.env.CDX_MAVEN_GOAL || "makeAggregateBom";
|
|
993
|
+
let mvnArgs = [`${cdxMavenPlugin}:${cdxMavenGoal}`, "-DoutputName=bom"];
|
|
993
994
|
// By using quiet mode we can reduce the maxBuffer used and avoid crashes
|
|
994
995
|
if (!DEBUG_MODE) {
|
|
995
996
|
mvnArgs.push("-q");
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@cyclonedx/cdxgen",
|
|
3
|
-
"version": "8.2.
|
|
3
|
+
"version": "8.2.4",
|
|
4
4
|
"description": "Creates CycloneDX Software Bill-of-Materials (SBOM) from source or container image",
|
|
5
5
|
"homepage": "http://github.com/cyclonedx/cdxgen",
|
|
6
6
|
"author": "Prabhu Subramanian <prabhu@appthreat.com>",
|