[maven] Investigate maven lockfile as an alternative for cyclonedx-maven-plugin

CycloneDX / cdxgen

Creates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate in your CI/CD pipeline with automatic submission to Dependency Track server. Slack: https://cyclonedx.slack.com/archives/C04NFFE1962

https://cyclonedx.github.io/cdxgen/

Apache License 2.0

475 stars 137 forks source link

[maven] Investigate maven lockfile as an alternative for cyclonedx-maven-plugin #1042

Open prabhu opened 4 weeks ago

prabhu commented 4 weeks ago

https://github.com/chains-project/maven-lockfile