search

CycloneDX / cyclonedx-gradle-plugin

Creates CycloneDX Software Bill of Materials (SBOM) from Gradle projects
https://cyclonedx.org/
Apache License 2.0
162 stars 77 forks source link

Issues using custom archive names with a multi-project setup #446

Closed HoustonPutman closed 4 months ago

HoustonPutman commented 5 months ago

Gradle supports custom archive naming through project.archivesBaseName, however this plugin using project.name as the only option of naming the maven component created for each project. Therefore projects that use project.archivesBaseName cannot really rely on this plugin as the generated SBOMs will have the incorrect component.name and component.purl.

The solution would be to use project.archivesBaseName by default, or have an option to switch from the default of project.name to project.archivesBaseName.

github-actions[bot] commented 3 months ago

This thread has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.