Skip to content

Commit 6752e91

Browse files
committed
Add documentation for maven-central
1 parent 066d06e commit 6752e91

File tree

1 file changed

+17
-1
lines changed

1 file changed

+17
-1
lines changed

sbom-github.md

Lines changed: 17 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,22 @@ By the end of this post, you will clearly understand how to add SBOMs to your so
6161
3. Make a release :)
6262
The final result looks like this: https://github.com/chains-project/maven-lockfile/releases/tag/v3.0.0
6363
64+
## Maven Central
65+
66+
JReleaser can also upload the SBOMs to Maven Central from version 1.6.0. If running JReleaser locally, make sure to use atleast version 1.6.0 and the SBOMs generated by `cyclonedx-maven-plugin` will be uploaded to Maven Central. If using the `jreleaser/release-action` action, be aware that even if you use the latest version of the action it can pull different versions of JReleaser. If using atleast version 1.6.0 it will upload the SBOMs to Maven Central.
67+
68+
```yml
69+
- name: Run JReleaser
70+
uses: jreleaser/release-action@f69e545b05f149483cecb2fb81866247992694b8
71+
with:
72+
version: 1.15.0
73+
arguments: full-release
74+
env:
75+
JRELEASER_GITHUB_TOKEN: ${{ secrets.JRELEASER_GITHUB_TOKEN }}
76+
[...]
77+
```
78+
79+
The final result looks like this: https://repo1.maven.org/maven2/io/github/chains-project/maven-lockfile/5.3.5/
80+
6481
## Conclusion
6582
In conclusion, adding SBOMs to your GitHub releases is a simple and effective way to improve the security and integrity of your software products. Following the steps outlined in this blog post, you can easily generate and add an SBOM to your GitHub release using Maven and JReleaser. With an SBOM, you can identify and remediate vulnerabilities in your software products on time, reducing the risk of security breaches and ensuring the trust of your users. We hope this post has helped guide you through adding SBOMs to your GitHub releases, and we encourage you to continue exploring ways to improve the security and quality of your software products.
66-

0 commit comments

Comments
 (0)