Commit f6e16cee authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

Merge branch 'feat/add-java-cataloger' into 'master' 

feat: use java cataloger

See merge request to-be-continuous/maven!88

Commit message:

Update default SBOM options to include Java cataloger

Explanation:

- Updated the default SBOM options to include the Java cataloger.
- This will allow Syft to generate SBOMs for Java applications.

Why the changes were done:

- The Java cataloger is required to generate SBOMs for Java applications.
- Without this cataloger, Syft would not be able to generate SBOMs for Java applications.

-------
🤖 Commit message generated by GitLab Duo
parents 89dbd9e8 eb23b260

kicker.json

+1 −1
Original line number Diff line number Diff line
@@ -266,7 +266,7 @@ 
            {

              "name": "MAVEN_SBOM_OPTS",

              "description": "Options for syft used for SBOM analysis",

              "default": "--catalogers rpm-db-cataloger,alpmdb-cataloger,apkdb-cataloger,dpkgdb-cataloger,portage-cataloger",

              "default": "--override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java",

              "advanced": true

            }

          ]

templates/gitlab-ci-maven-jib.yml

+1 −1
Original line number Diff line number Diff line
@@ -52,7 +52,7 @@ spec: 
      default: registry.hub.docker.com/anchore/syft:debug

    sbom-opts:

      description: Options for syft used for SBOM analysis

      default: --catalogers rpm-db-cataloger,alpmdb-cataloger,apkdb-cataloger,dpkgdb-cataloger,portage-cataloger

      default: --override-default-catalogers rpm-db-cataloger,alpm-db-cataloger,apk-db-cataloger,dpkg-db-cataloger,portage-cataloger,nix-store-cataloger,java

---

variables:

  MAVEN_SBOM_IMAGE: $[[ inputs.sbom-image ]]