X-Git-Url: https://gerrit.linuxfoundation.org/infra/gitweb?a=blobdiff_plain;f=docs%2Fjjb%2Flf-maven-jobs.rst;h=411a712642ad7d8838421268e314c0cf267fe64e;hb=refs%2Ftags%2Fv0.75.0;hp=86e586e0cd9de4da9c5cde2cb09a88d81bc83d45;hpb=599b705c033b73a5565027db210960ae7658f9f5;p=releng%2Fglobal-jjb.git diff --git a/docs/jjb/lf-maven-jobs.rst b/docs/jjb/lf-maven-jobs.rst index 86e586e0..411a7126 100644 --- a/docs/jjb/lf-maven-jobs.rst +++ b/docs/jjb/lf-maven-jobs.rst @@ -41,6 +41,8 @@ Runs Sonar against a Maven project and pushes results to SonarCloud. :sonarcloud-project-organization: SonarCloud project organization. :sonarcloud-api-token: SonarCloud API Token. :sonarcloud-java-version: Version of Java to run the Sonar scan. (default: openjdk11) + :sonarcloud-qualitygate-wait: SonarCloud flag that forces the analysis step to + wait for the quality gate result. (default: false) lf-maven-build -------------- @@ -107,6 +109,15 @@ Nexus IQ server. :mvn-goals: The maven goals to perform for the build. (default: clean install) +lf-infra-maven-sbom-generator +----------------------------- + +Runs a specific version of SPDX SBOM Generator tool to generate a report. +The calling job template sets the version to run in the SBOM_GENERATOR_VERSION parameter. + +:Optional parameters: + :sbom-flags: SBOM generator options. See https://github.com/opensbom-generator/spdx-sbom-generator + Job Templates ============= @@ -402,6 +413,12 @@ directory is then used later to deploy to Nexus. :mvn-version: Version of maven to use. (default: mvn35) :ossrh-profile-id: Profile ID for project as provided by OSSRH. (default: '') + :sbom-flags: SBOM generator options if using sbom-generator. + See https://github.com/opensbom-generator/spdx-sbom-generator + :sbom-generator: Calls lf-infra-maven-sbom-generator to run the SPDX SBOM generator tool. + (default: false) + :sbom-generator-version: SBOM generator version to download and run if using sbom-generator. + (default: v0.0.10) :sign-artifacts: Sign artifacts with Sigul. (default: false) :stream: Keyword that represents a release code-name. Often the same as the branch. (default: master) @@ -568,6 +585,8 @@ This job runs on dev branches and its triggered on new patchsets. (default: '') :sonarcloud-api-token: SonarCloud API Token. (default: '') :sonarcloud-java-version: Version of Java to use for the Sonar scan. (default: openjdk11) + :sonarcloud-qualitygate-wait: SonarCloud flag that forces the analysis step to + wait for the quality gate result. (default: false) :stream: Keyword that represents a release code-name. Often the same as the branch. (default: master) :submodule-recursive: Whether to checkout submodules recursively.