[38] Enable SBOM generation with Tycho 4.0.10

Bug: #38 Signed-off-by: Pierre-Charles David <[email protected]>
eclipse-emfservices · Jan 25, 2025 · d31146e · d31146e
1 parent 9fb109f
commit d31146e
Show file tree

Hide file tree

Showing 2 changed files with 42 additions and 10 deletions.
diff --git a/releng/org.eclipse.emf.validation.releng/pom.xml b/releng/org.eclipse.emf.validation.releng/pom.xml
@@ -12,12 +12,14 @@
 
   <!-- this is the parent POM from which all modules inherit common settings -->
   <properties>
-    <tycho-version>4.0.8</tycho-version>
-    <cbi-plugins.version>1.3.2</cbi-plugins.version>
+    <tycho.version>4.0.10</tycho.version>
+    <cbi-plugins.version>1.5.2</cbi-plugins.version>
+    <cyclonedx.version>2.9.1</cyclonedx.version>
     <maven.test.failure.ignore>true</maven.test.failure.ignore>
     <platform>2022-09</platform>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <tycho.scmUrl>scm:git:https://github.com/eclipse-emfservices/emf-validation.git</tycho.scmUrl>
+    <tycho.sbom.url>https://download.eclipse.org/modeling/emf/validation/updates/releases/</tycho.sbom.url>
   </properties>
 
   <distributionManagement>
@@ -38,13 +40,13 @@
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>tycho-maven-plugin</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <extensions>true</extensions>
       </plugin>
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>tycho-source-plugin</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <executions>
           <execution>
             <id>plugin-source</id>
@@ -63,7 +65,7 @@
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>tycho-packaging-plugin</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <configuration>
           <sourceReferences>
             <generate>true</generate>
@@ -73,14 +75,14 @@
           <dependency>
             <groupId>org.eclipse.tycho.extras</groupId>
             <artifactId>tycho-sourceref-jgit</artifactId>
-            <version>${tycho-version}</version>
+            <version>${tycho.version}</version>
           </dependency>
         </dependencies>
       </plugin>
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>target-platform-configuration</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <configuration>
           <!-- add target file content to target platform -->
           <target>
@@ -113,15 +115,15 @@
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>tycho-p2-repository-plugin</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <configuration>
           <includeAllSources>true</includeAllSources>
         </configuration>
       </plugin>
       <plugin>
         <groupId>org.eclipse.tycho</groupId>
         <artifactId>tycho-p2-plugin</artifactId>
-        <version>${tycho-version}</version>
+        <version>${tycho.version}</version>
         <executions>
           <execution>
             <id>attach-p2-metadata</id>
@@ -136,6 +138,36 @@
   </build>
 
   <profiles>
+    <profile>
+      <id>sbom</id>
+      <activation>
+        <activeByDefault>true</activeByDefault>
+      </activation>
+      <build>
+        <plugins>
+          <plugin>
+            <groupId>org.cyclonedx</groupId>
+            <artifactId>cyclonedx-maven-plugin</artifactId>
+            <version>${cyclonedx.version}</version>
+            <dependencies>
+              <dependency>
+                <groupId>org.eclipse.tycho</groupId>
+                <artifactId>tycho-sbom</artifactId>
+                <version>${tycho.version}</version>
+              </dependency>
+            </dependencies>
+            <executions>
+              <execution>
+                <phase>package</phase>
+                <goals>
+                  <goal>makeAggregateBom</goal>
+                </goals>
+              </execution>
+            </executions>
+          </plugin>
+        </plugins>
+      </build>
+    </profile>
     <profile>
       <id>sign</id>
       <build>

diff --git a/tests/org.eclipse.emf.validation.tests/pom.xml b/tests/org.eclipse.emf.validation.tests/pom.xml
@@ -18,7 +18,7 @@
 			<plugin>
 				<groupId>org.eclipse.tycho</groupId>
 				<artifactId>tycho-surefire-plugin</artifactId>
-				<version>${tycho-version}</version>
+				<version>${tycho.version}</version>
 				<configuration>
 					<useUIHarness>true</useUIHarness>
 					<useUIThread>true</useUIThread>