Skip to content

Commit 4fcd71f

Browse files
devtobidevtobi
authored
Maintenance: Add SBOM generation via CycloneDX (#549)
* 🔧 Added SBOM configuration for API gateway * 🔧 Added SBOM configuration for tools * [maven-release-plugin] prepare release refarch-tools-1.2.3 * [maven-release-plugin] prepare for next development iteration * 🔧 Added SBOM configuration for integrations * Revert "[maven-release-plugin] prepare for next development iteration" This reverts commit 7204fe2. * Revert "[maven-release-plugin] prepare release refarch-tools-1.2.3" This reverts commit 6eb307e. * 🔧 Change SBOM projectType for services to application * ♻️ Aligned gateway sbom configuration * 🐛 Fix generation of SBOM in integrations for snapshots
1 parent 40469ad commit 4fcd71f

File tree

10 files changed

+203
-70
lines changed
  • refarch-gateway
  • refarch-integrations
    • pom.xml
    • refarch-cosys-integration/refarch-cosys-integration-example
    • refarch-dms-integration
      • refarch-dms-integration-example
      • refarch-dms-integration-fabasoft-soap/refarch-dms-integration-fabasoft-mock-service
    • refarch-email-integration/refarch-email-integration-example
    • refarch-s3-integration/refarch-s3-integration-rest/refarch-s3-integration-rest-service
  • refarch-tools/refarch-java-tools

10 files changed

+203
-70
lines changed

‎refarch-gateway/pom.xml‎

Lines changed: 36 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -11,11 +11,31 @@
1111

1212
<groupId>de.muenchen.refarch</groupId>
1313
<artifactId>refarch-gateway</artifactId>
14+
<version>1.6.0-SNAPSHOT</version>
15+
1416
<name>refarch-gateway</name>
1517
<description>Ready to use RefArch gateway based on Spring Cloud Gateway</description>
1618
<url>https://github.com/it-at-m/refarch</url>
17-
<version>1.6.0-SNAPSHOT</version>
18-
<packaging>jar</packaging>
19+
<licenses>
20+
<license>
21+
<name>MIT</name>
22+
<url>https://opensource.org/licenses/MIT</url>
23+
<distribution>repo</distribution>
24+
</license>
25+
</licenses>
26+
<scm>
27+
<url>https://github.com/it-at-m/refarch.git</url>
28+
<connection>scm:git:https://github.com/it-at-m/refarch.git</connection>
29+
<developerConnection>scm:git:https://github.com/it-at-m/refarch.git</developerConnection>
30+
<tag>HEAD</tag>
31+
</scm>
32+
<developers>
33+
<developer>
34+
<organization>it@M</organization>
35+
<email>[email protected]</email>
36+
<url>https://github.com/it-at-m</url>
37+
</developer>
38+
</developers>
1939

2040
<properties>
2141
<!-- Compilation -->
@@ -182,6 +202,18 @@
182202
<groupId>org.springframework.boot</groupId>
183203
<artifactId>spring-boot-maven-plugin</artifactId>
184204
</plugin>
205+
<plugin>
206+
<groupId>org.cyclonedx</groupId>
207+
<artifactId>cyclonedx-maven-plugin</artifactId>
208+
<executions>
209+
<execution>
210+
<configuration>
211+
<skipNotDeployed>false</skipNotDeployed>
212+
</configuration>
213+
</execution>
214+
</executions>
215+
</plugin>
216+
185217
<!-- Testing -->
186218
<plugin>
187219
<groupId>org.apache.maven.plugins</groupId>
@@ -213,6 +245,7 @@
213245
</execution>
214246
</executions>
215247
</plugin>
248+
216249
<!-- Release -->
217250
<plugin>
218251
<groupId>org.apache.maven.plugins</groupId>
@@ -227,7 +260,7 @@
227260
</configuration>
228261
</plugin>
229262

230-
<!-- Codeformatter Spotless -->
263+
<!-- Linting -->
231264
<plugin>
232265
<groupId>com.diffplug.spotless</groupId>
233266
<artifactId>spotless-maven-plugin</artifactId>
@@ -268,8 +301,6 @@
268301
</execution>
269302
</executions>
270303
</plugin>
271-
272-
<!-- Linting -->
273304
<plugin>
274305
<groupId>org.apache.maven.plugins</groupId>
275306
<artifactId>maven-pmd-plugin</artifactId>
@@ -330,23 +361,4 @@
330361
</plugin>
331362
</plugins>
332363
</build>
333-
334-
<scm>
335-
<url>https://github.com/it-at-m/refarch.git</url>
336-
<connection>scm:git:https://github.com/it-at-m/refarch.git</connection>
337-
<developerConnection>scm:git:https://github.com/it-at-m/refarch.git</developerConnection>
338-
<tag>HEAD</tag>
339-
</scm>
340-
<licenses>
341-
<license>
342-
<name>MIT</name>
343-
</license>
344-
</licenses>
345-
<developers>
346-
<developer>
347-
<organization>it@M</organization>
348-
<email>[email protected]</email>
349-
<url>https://github.com/it-at-m</url>
350-
</developer>
351-
</developers>
352364
</project>

‎refarch-gateway/src/main/java/de/muenchen/refarch/gateway/configuration/SecurityConfiguration.java‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,8 @@ public SecurityWebFilterChain springSecurityFilterChain(final ServerHttpSecurity
5656
"/actuator/health/readiness",
5757
"/actuator/info",
5858
"/actuator/metrics",
59+
"/actuator/sbom",
60+
"/actuator/sbom/application",
5961
"/public/**")
6062
.permitAll()
6163
// only authenticated

‎refarch-gateway/src/main/resources/application.yml‎

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,11 @@ management:
3030
default: none
3131
web:
3232
exposure:
33-
include: health, info, prometheus
33+
include:
34+
- health
35+
- info
36+
- prometheus
37+
- sbom
3438
path-mapping:
3539
prometheus: metrics
3640
endpoint:
@@ -42,6 +46,8 @@ management:
4246
access: read_only
4347
prometheus:
4448
access: read_only
49+
sbom:
50+
access: read_only
4551
info:
4652
env:
4753
enabled: true

‎refarch-integrations/pom.xml‎

Lines changed: 39 additions & 24 deletions
Original file line numberDiff line numberDiff line change
@@ -11,11 +11,32 @@
1111

1212
<groupId>de.muenchen.refarch</groupId>
1313
<artifactId>refarch-integrations</artifactId>
14+
<version>1.6.0-SNAPSHOT</version>
15+
<packaging>pom</packaging>
16+
1417
<name>refarch-integrations</name>
1518
<description>Collection of different ready to use RefArch integrations</description>
1619
<url>https://github.com/it-at-m/refarch</url>
17-
<version>1.6.0-SNAPSHOT</version>
18-
<packaging>pom</packaging>
20+
<licenses>
21+
<license>
22+
<name>MIT</name>
23+
<url>https://opensource.org/licenses/MIT</url>
24+
<distribution>repo</distribution>
25+
</license>
26+
</licenses>
27+
<scm>
28+
<url>https://github.com/it-at-m/refarch.git</url>
29+
<connection>scm:git:https://github.com/it-at-m/refarch.git</connection>
30+
<developerConnection>scm:git:https://github.com/it-at-m/refarch.git</developerConnection>
31+
<tag>HEAD</tag>
32+
</scm>
33+
<developers>
34+
<developer>
35+
<organization>it@M</organization>
36+
<email>[email protected]</email>
37+
<url>https://github.com/it-at-m</url>
38+
</developer>
39+
</developers>
1940

2041
<modules>
2142
<module>refarch-s3-integration</module>
@@ -180,6 +201,20 @@
180201
</execution>
181202
</executions>
182203
</plugin>
204+
<plugin>
205+
<groupId>org.cyclonedx</groupId>
206+
<artifactId>cyclonedx-maven-plugin</artifactId>
207+
<executions>
208+
<execution>
209+
<configuration>
210+
<projectType>library</projectType>
211+
<outputName>library.cdx</outputName>
212+
<skipNotDeployed>false</skipNotDeployed>
213+
</configuration>
214+
</execution>
215+
</executions>
216+
</plugin>
217+
183218
<!-- Testing -->
184219
<plugin>
185220
<groupId>org.apache.maven.plugins</groupId>
@@ -211,6 +246,7 @@
211246
</execution>
212247
</executions>
213248
</plugin>
249+
214250
<!-- Release -->
215251
<plugin>
216252
<groupId>org.apache.maven.plugins</groupId>
@@ -224,7 +260,7 @@
224260
</configuration>
225261
</plugin>
226262

227-
<!-- Codeformatter Spotless -->
263+
<!-- Linting -->
228264
<plugin>
229265
<groupId>com.diffplug.spotless</groupId>
230266
<artifactId>spotless-maven-plugin</artifactId>
@@ -265,8 +301,6 @@
265301
</execution>
266302
</executions>
267303
</plugin>
268-
269-
<!-- Linting -->
270304
<plugin>
271305
<groupId>org.apache.maven.plugins</groupId>
272306
<artifactId>maven-pmd-plugin</artifactId>
@@ -353,23 +387,4 @@
353387
</build>
354388
</profile>
355389
</profiles>
356-
357-
<scm>
358-
<url>https://github.com/it-at-m/refarch.git</url>
359-
<connection>scm:git:https://github.com/it-at-m/refarch.git</connection>
360-
<developerConnection>scm:git:https://github.com/it-at-m/refarch.git</developerConnection>
361-
<tag>HEAD</tag>
362-
</scm>
363-
<licenses>
364-
<license>
365-
<name>MIT</name>
366-
</license>
367-
</licenses>
368-
<developers>
369-
<developer>
370-
<organization>it@M</organization>
371-
<email>[email protected]</email>
372-
<url>https://github.com/it-at-m</url>
373-
</developer>
374-
</developers>
375390
</project>

‎refarch-integrations/refarch-cosys-integration/refarch-cosys-integration-example/pom.xml‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -27,4 +27,20 @@
2727
</dependency>
2828
</dependencies>
2929

30+
<build>
31+
<plugins>
32+
<plugin>
33+
<groupId>org.cyclonedx</groupId>
34+
<artifactId>cyclonedx-maven-plugin</artifactId>
35+
<executions>
36+
<execution>
37+
<configuration>
38+
<projectType>application</projectType>
39+
<outputName>application.cdx</outputName>
40+
</configuration>
41+
</execution>
42+
</executions>
43+
</plugin>
44+
</plugins>
45+
</build>
3046
</project>

‎refarch-integrations/refarch-dms-integration/refarch-dms-integration-example/pom.xml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,4 +21,21 @@
2121
</dependency>
2222
</dependencies>
2323

24+
<build>
25+
<plugins>
26+
<plugin>
27+
<groupId>org.cyclonedx</groupId>
28+
<artifactId>cyclonedx-maven-plugin</artifactId>
29+
<executions>
30+
<execution>
31+
<configuration>
32+
<projectType>application</projectType>
33+
<outputName>application.cdx</outputName>
34+
</configuration>
35+
</execution>
36+
</executions>
37+
</plugin>
38+
</plugins>
39+
</build>
40+
2441
</project>

‎refarch-integrations/refarch-dms-integration/refarch-dms-integration-fabasoft-soap/refarch-dms-integration-fabasoft-mock-service/pom.xml‎

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -33,4 +33,21 @@
3333
</dependency>
3434
</dependencies>
3535

36+
<build>
37+
<plugins>
38+
<plugin>
39+
<groupId>org.cyclonedx</groupId>
40+
<artifactId>cyclonedx-maven-plugin</artifactId>
41+
<executions>
42+
<execution>
43+
<configuration>
44+
<projectType>application</projectType>
45+
<outputName>application.cdx</outputName>
46+
</configuration>
47+
</execution>
48+
</executions>
49+
</plugin>
50+
</plugins>
51+
</build>
52+
3653
</project>

‎refarch-integrations/refarch-email-integration/refarch-email-integration-example/pom.xml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -35,6 +35,18 @@
3535
<groupId>org.springframework.boot</groupId>
3636
<artifactId>spring-boot-maven-plugin</artifactId>
3737
</plugin>
38+
<plugin>
39+
<groupId>org.cyclonedx</groupId>
40+
<artifactId>cyclonedx-maven-plugin</artifactId>
41+
<executions>
42+
<execution>
43+
<configuration>
44+
<projectType>application</projectType>
45+
<outputName>application.cdx</outputName>
46+
</configuration>
47+
</execution>
48+
</executions>
49+
</plugin>
3850
</plugins>
3951
</build>
4052
</project>

‎refarch-integrations/refarch-s3-integration/refarch-s3-integration-rest/refarch-s3-integration-rest-service/pom.xml‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -147,6 +147,18 @@
147147
<groupId>org.springframework.boot</groupId>
148148
<artifactId>spring-boot-maven-plugin</artifactId>
149149
</plugin>
150+
<plugin>
151+
<groupId>org.cyclonedx</groupId>
152+
<artifactId>cyclonedx-maven-plugin</artifactId>
153+
<executions>
154+
<execution>
155+
<configuration>
156+
<projectType>application</projectType>
157+
<outputName>application.cdx</outputName>
158+
</configuration>
159+
</execution>
160+
</executions>
161+
</plugin>
150162
</plugins>
151163
</build>
152164
</project>

0 commit comments

Comments
 (0)