@groovy.transform.CompileStatic class SbomPlugin extends java.lang.Object implements Plugin<Project>
| Constructor and description |
|---|
SbomPlugin() |
| Type Params | Return Type | Name and description |
|---|---|---|
|
void |
apply(Project project) |
|
static Provider<java.lang.String> |
cliCompanionArtifactId(Project project)The companion coordinate published by the cli-artifact plugin, honouring a custom cliArtifact { artifactId = '...' }. |
|
static java.lang.Object |
pickLicense(Logger logger, java.lang.String projectName, java.lang.String sbomComponent, java.lang.String bomRef, java.util.List licenseChoices)Picks the most appropriate license for a dependency from a list of license choices. |
|
static Provider<RegularFile> |
sbomOutputLocationFor(Project project, Provider<java.lang.String> artifactId) |
| Methods inherited from class | Name |
|---|---|
class java.lang.Object |
java.lang.Object#equals(java.lang.Object), java.lang.Object#getClass(), java.lang.Object#hashCode(), java.lang.Object#notify(), java.lang.Object#notifyAll(), java.lang.Object#toString(), java.lang.Object#wait(), java.lang.Object#wait(long), java.lang.Object#wait(long, int) |
The companion coordinate published by the cli-artifact plugin, honouring a custom
cliArtifact { artifactId = '...' }. Read from the extension directly (the same property
the cli publication uses) rather than the derived <name>-cli default, so a customised
name is reflected in the SBOM component name and file. Accessed dynamically because build-logic
does not compile against the cli-artifact plugin.
Picks the most appropriate license for a dependency from a list of license choices. This method is called at execution time and should not access Task.project.
logger - the logger to use for loggingprojectName - the name of the project (captured at configuration time)sbomComponent - the artifact the SBOM describes (the primary or cli companion coordinate)bomRef - the bom reference for the dependencylicenseChoices - the list of license choices