Skip to content

Commit 61c6043

Browse files
committed
fix indentation and add more maven central
1 parent 9dddbff commit 61c6043

File tree

1 file changed

+16
-16
lines changed

1 file changed

+16
-16
lines changed

sbom-github.md

Lines changed: 16 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
1-
# Adding SBOMs to your GitHub Releases with Jreleaser
1+
# Adding SBOMs to your GitHub and Maven Central Releases with Jreleaser
22

33
## Motivation
44
Software Bill of Materials (SBOMs) are critical to modern software development and supply chain management.
55
An SBOM is a complete inventory of all the components and dependencies of a software product.
66
It provides a detailed list of all the open-source and third-party components used in a software product, their versions and any known vulnerabilities.
77
SBOMs are essential for ensuring the security and integrity of software products, as they enable developers and security teams to identify and remediate vulnerabilities in a timely manner.
8-
In this blog post, we will discuss how to add SBOMs to your GitHub releases and JReleaser, and why it is essential.
8+
In this blog post, we will discuss how to add SBOMs to your GitHub and Maven Central releases and JReleaser, and why it is essential.
99

1010
## Requirements
1111

@@ -15,8 +15,8 @@ Here we show how to do it with maven and cyclonedx-maven-plugin.
1515

1616
## Goal
1717

18-
This blog post provides a step-by-step guide on adding SBOMs to your GitHub releases using Maven and JReleaser.
19-
We will cover the requirements for adding SBOMs, the benefits of doing so, and the steps involved in generating and adding an SBOM to your GitHub release.
18+
This blog post provides a step-by-step guide on adding SBOMs to your GitHub and Maven Central releases using Maven and JReleaser.
19+
We will cover the requirements for adding SBOMs, the benefits of doing so, and the steps involved in generating and adding an SBOM to your GitHub and Maven Central release.
2020
By the end of this post, you will clearly understand how to add SBOMs to your software releases and why it is crucial to do so.
2121

2222
## Steps
@@ -67,18 +67,18 @@ By the end of this post, you will clearly understand how to add SBOMs to your so
6767
If running JReleaser locally, make sure to use atleast version 1.6.0 and the SBOMs generated by `cyclonedx-maven-plugin` will be uploaded to Maven Central.
6868
If using the `jreleaser/release-action` action, be aware that even if you use the latest version of the action it can pull different versions of JReleaser. If using atleast version 1.6.0 it will upload the SBOMs to Maven Central.
6969

70-
```yml
71-
- name: Run JReleaser
72-
uses: jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8
73-
with:
74-
version: 1.15.0
75-
arguments: full-release
76-
env:
77-
JRELEASER_GITHUB_TOKEN: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
78-
[...]
79-
```
80-
81-
The final result looks like this: https://repo1.maven.org/maven2/io/github/chains-project/maven-lockfile/5.3.5/
70+
```yml
71+
- name: Run JReleaser
72+
uses: jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8
73+
with:
74+
version: 1.15.0
75+
arguments: full-release
76+
env:
77+
JRELEASER_GITHUB_TOKEN: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
78+
[...]
79+
```
80+
81+
The final result looks like this: https://repo1.maven.org/maven2/io/github/chains-project/maven-lockfile/5.3.5/
8282

8383
## Conclusion
8484
In conclusion, adding SBOMs to your GitHub and Maven Central releases is a simple and effective way to improve the security and integrity of your software products. Following the steps outlined in this blog post, you can easily generate and add an SBOM to your GitHub and Maven Central release using Maven and JReleaser. With an SBOM, you can identify and remediate vulnerabilities in your software products on time, reducing the risk of security breaches and ensuring the trust of your users. We hope this post has helped guide you through adding SBOMs to your GitHub and Maven Central releases, and we encourage you to continue exploring ways to improve the security and quality of your software products.

0 commit comments

Comments
 (0)