Skip to content

Commit f1b1929

Browse files
committed
update
1 parent d156184 commit f1b1929

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

sbom-github.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ By the end of this post, you will clearly understand how to add SBOMs to your so
4646
This will generate a bom.xml file in the target directory. We use the `makeAggregateBom` goal to have a single sbom for all the modules of our project.
4747

4848
2. (GitHub) Add the bom.xml and bom.json to your release script.
49-
If you have the JReleaser YAML file, you can add the bom.xml to the files section of the release section.
49+
If you have the JReleaser YAML file, you can add the bom.xml to the files section of the release section. This only affects the GitHub release.
5050

5151
```yaml
5252
files:
@@ -58,7 +58,7 @@ By the end of this post, you will clearly understand how to add SBOMs to your so
5858
5959
This adds the bom.xml and bom.json to the release assets.
6060
61-
3. (Maven Central) JReleaser can also upload the SBOMs to Maven Central from version 1.6.0.
61+
3. (Maven Central) JReleaser automatically uploads the SBOMs to Maven Central from version 1.6.0.
6262
If running JReleaser locally, make sure to use atleast version 1.6.0 and the SBOMs generated by `cyclonedx-maven-plugin` will be uploaded to Maven Central.
6363
If using the `jreleaser/release-action` action, be aware that even if you use the latest version of the action it can pull different versions of JReleaser. If using atleast version 1.6.0 it will upload the SBOMs to Maven Central.
6464
See example from `maven-lockfile` release action:

0 commit comments

Comments
 (0)