X-Git-Url: https://gerrit.linuxfoundation.org/infra/gitweb?a=blobdiff_plain;f=shell%2Fsbom-generator.sh;h=c63efd6801a619e3a945557bbc749d006e1fd123;hb=bc75e147545672639c0dfa25e61bff0e2d7166a5;hp=913a639140843337793b36410adab7559243e9c4;hpb=84c8fef9bb02da303d1dacd2ec5339650bd87e5d;p=releng%2Fglobal-jjb.git diff --git a/shell/sbom-generator.sh b/shell/sbom-generator.sh index 913a6391..c63efd68 100644 --- a/shell/sbom-generator.sh +++ b/shell/sbom-generator.sh @@ -32,8 +32,21 @@ tar -xzf "${SBOM_LOCATION}" -C ${SBOM_PATH} echo "INFO: running spdx-sbom-generator" cd ${SBOM_PATH} ./spdx-sbom-generator "${SBOM_FLAGS:-}" -g "$GLOBAL_SETTINGS_FILE" -o "${WORKSPACE}"/archives -mv "${WORKSPACE}"/archives/bom-Java-Maven.spdx "${WORKSPACE}"/archives/sbom-"${JOB_BASE_NAME}" -cp "${WORKSPACE}"/archives/sbom-"${JOB_BASE_NAME}" "${WORKSPACE}"/m2repo/sbom-"${JOB_BASE_NAME}" + +# Maven artifacts +if [[ "$JOB_NAME" =~ "maven" ]]; then + mvn_group_id=$("$MVN" help:evaluate -Dexpression=project.groupId -q -DforceStdout \ + -s "$SETTINGS_FILE" -gs "$GLOBAL_SETTINGS_FILE") + group_id_path="${mvn_group_id//.//}" + release_version=$("$MVN" help:evaluate -Dexpression=project.version -q -DforceStdout \ + -s "$SETTINGS_FILE" -gs "$GLOBAL_SETTINGS_FILE") + + mv "${WORKSPACE}/archives/bom-Java-Maven.spdx" \ + "${WORKSPACE}/archives/${PROJECT##*/}-sbom-${release_version}.spdx" + cp "${WORKSPACE}/archives/${PROJECT##*/}-sbom-${release_version}.spdx" \ + "${WORKSPACE}/m2repo/${group_id_path}/${PROJECT##*/}-sbom-${release_version}.spdx" +fi + mv spdx-sbom-generator /tmp/ rm /tmp/spdx* echo "---> sbom-generator.sh ends"