Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

replace CDX 1.5 deprecated tool #517

Merged
merged 1 commit into from
Jun 29, 2024
Merged

replace CDX 1.5 deprecated tool #517

merged 1 commit into from
Jun 29, 2024

Conversation

hboutemy
Copy link
Contributor

fixes #487

for CDX 1.5+, generate:

<bom xmlns="http://cyclonedx.org/schema/bom/1.5">
  <metadata>
    <tools>
      <components>
        <component type="library">
          <author>OWASP Foundation</author>
          <group>org.cyclonedx</group>
          <name>cyclonedx-maven-plugin</name>
          <version>2.8.1-SNAPSHOT</version>
          <description>CycloneDX Maven plugin</description>
          <hashes>
...
          </hashes>
        </component>
      </components>
    </tools>
...

instead of

<bom xmlns="http://cyclonedx.org/schema/bom/1.4">
  <metadata>
    <tools>
      <tool>
        <vendor>OWASP Foundation</vendor>
        <name>CycloneDX Maven plugin</name>
        <version>2.8.1-SNAPSHOT</version>
        <hashes>
...
        </hashes>
      </tool>
    </tools>
...

fixes #487

Signed-off-by: Hervé Boutemy <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
1 participant