natas_hw
/
ant-ivy
mirror of https://github.com/apache/ant-ivy
0
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #118 from apache/cyclonedx 

Cyclonedx
This commit is contained in:
Stefan Bodewig 2026-06-12 06:13:49 +00:00 committed by GitHub
parent 8ca1d8895e c0601d9258
commit b2cd04d116
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
9 changed files with 245311 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

416
build-release.xml
View File

@ -288,15 +288,15 @@
</exec> </exec>
<mkdir dir="${distrib.dir}/dist/${build.version}"/> <mkdir dir="${distrib.dir}/dist/${build.version}"/>
<zip destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-src.zip" defaultexcludes="no"> <zip destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-src.zip" defaultexcludes="no">
<zipfileset dir="${build.dir}/snapshot-src" prefix="${snapshot.full.name}" defaultexcludes="no" excludes=".git/**"/> <zipfileset dir="${build.dir}/snapshot-src" prefix="${snapshot.full.name}" defaultexcludes="no" excludes=".git/**" id="dist.sources"/>
</zip> </zip>
<tar destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-src.tar.gz" <tar destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-src.tar.gz"
compression="gzip" longfile="gnu" defaultexcludes="no"> compression="gzip" longfile="gnu" defaultexcludes="no">
<zipfileset dir="${build.dir}/snapshot-src" prefix="${snapshot.full.name}" defaultexcludes="no" excludes=".git/**"/> <zipfileset refid="dist.sources"/>
</tar> </tar>
</target> </target>
<target name="snapshot-bin-without-dependencies" depends="snapshot-metadata,jar,all-doc"> <target name="snapshot-bin-without-dependencies" depends="snapshot-metadata,jar,jar-sbom,all-doc">
<mkdir dir="${distrib.dir}/dist/${build.version}"/> <mkdir dir="${distrib.dir}/dist/${build.version}"/>
<zip destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-bin.zip"> <zip destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-bin.zip">
<zipfileset dir="${doc.build.dir}" prefix="${snapshot.full.name}/doc" excludes="**/reports/coverage/**,**/reports/test/**"/> <zipfileset dir="${doc.build.dir}" prefix="${snapshot.full.name}/doc" excludes="**/reports/coverage/**,**/reports/test/**"/>
@ -311,6 +311,7 @@
<zipfileset dir="${basedir}" includes="build-for-bin-distrib.xml" fullpath="${snapshot.full.name}/build.xml"/> <zipfileset dir="${basedir}" includes="build-for-bin-distrib.xml" fullpath="${snapshot.full.name}/build.xml"/>
<zipfileset dir="${artifacts.build.dir}/jars" includes="${final.name}" fullpath="${snapshot.full.name}/ivy-${build.version}.jar"/> <zipfileset dir="${artifacts.build.dir}/jars" includes="${final.name}" fullpath="${snapshot.full.name}/ivy-${build.version}.jar"/>
<zipfileset dir="${artifacts.build.dir}/jars" includes="ivy-${build.version}-cyclonedx.*" prefix="${snapshot.full.name}"/>
</zip> </zip>
<tar destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-bin.tar.gz" <tar destfile="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-bin.tar.gz"
compression="gzip" longfile="gnu"> compression="gzip" longfile="gnu">
@ -318,7 +319,7 @@
</tar> </tar>
</target> </target>
<target name="snapshot-bin-with-dependencies" depends="snapshot-metadata,jar,all-doc"> <target name="snapshot-bin-with-dependencies" depends="snapshot-metadata,jar,jar-sbom,all-doc">
<mkdir dir="${distrib.dir}/dist/${build.version}"/> <mkdir dir="${distrib.dir}/dist/${build.version}"/>
<delete dir="${build.dir}/lib"/> <delete dir="${build.dir}/lib"/>
<ivy:retrieve conf="default" pattern="${build.dir}/lib/[artifact]-[revision].[ext]"/> <ivy:retrieve conf="default" pattern="${build.dir}/lib/[artifact]-[revision].[ext]"/>
@ -334,6 +335,7 @@
<zipfileset dir="${artifacts.build.dir}" includes="ivy.xml" fullpath="${snapshot.full.name}/ivy.xml"/> <zipfileset dir="${artifacts.build.dir}" includes="ivy.xml" fullpath="${snapshot.full.name}/ivy.xml"/>
<zipfileset dir="${artifacts.build.dir}/jars" includes="${final.name}" fullpath="${snapshot.full.name}/ivy-${build.version}.jar"/> <zipfileset dir="${artifacts.build.dir}/jars" includes="${final.name}" fullpath="${snapshot.full.name}/ivy-${build.version}.jar"/>
<zipfileset dir="${artifacts.build.dir}/jars" includes="ivy-${build.version}-cyclonedx.*" prefix="${snapshot.full.name}"/>
<zipfileset dir="${build.dir}/lib" prefix="${snapshot.full.name}/lib" excludes="ant-*.jar,bcpg-*.jar,bcprov*.jar"/> <zipfileset dir="${build.dir}/lib" prefix="${snapshot.full.name}/lib" excludes="ant-*.jar,bcpg-*.jar,bcprov*.jar"/>
</zip> </zip>
@ -361,6 +363,10 @@
</ivy:makepom> </ivy:makepom>
<copy file="${artifacts.build.dir}/jars/${final.name}" <copy file="${artifacts.build.dir}/jars/${final.name}"
tofile="${m2.distrib.dir}/ivy-${build.version}.jar"/> tofile="${m2.distrib.dir}/ivy-${build.version}.jar"/>
<!-- SBOMs -->
<copy todir="${m2.distrib.dir}">
<fileset dir="${artifacts.build.dir}/jars" includes="ivy-${build.version}-cyclonedx.*"/>
</copy>
<!-- jar javadocs --> <!-- jar javadocs -->
<jar destfile="${m2.distrib.dir}/ivy-${build.version}-javadoc.jar"> <jar destfile="${m2.distrib.dir}/ivy-${build.version}-javadoc.jar">
<fileset dir="${javadoc.build.dir}"/> <fileset dir="${javadoc.build.dir}"/>
@ -373,12 +379,16 @@
<fileset dir="${m2.distrib.dir}"> <fileset dir="${m2.distrib.dir}">
<include name="*.pom"/> <include name="*.pom"/>
<include name="*.jar"/> <include name="*.jar"/>
<include name="*-cyclonedx.json"/>
<include name="*-cyclonedx.xml"/>
</fileset> </fileset>
</checksum> </checksum>
<checksum algorithm="sha-512" fileext=".sha512"> <checksum algorithm="sha-512" fileext=".sha512">
<fileset dir="${m2.distrib.dir}"> <fileset dir="${m2.distrib.dir}">
<include name="*.pom"/> <include name="*.pom"/>
<include name="*.jar"/> <include name="*.jar"/>
<include name="*-cyclonedx.json"/>
<include name="*-cyclonedx.xml"/>
</fileset> </fileset>
</checksum> </checksum>
</target> </target>
@ -390,6 +400,8 @@
<include name="*.jar"/> <include name="*.jar"/>
<include name="*.zip"/> <include name="*.zip"/>
<include name="*.gz"/> <include name="*.gz"/>
<include name="*.cyclonedx.json"/>
<include name="*.cyclonedx.xml"/>
</fileset> </fileset>
</checksum> </checksum>
<checksum algorithm="sha-512" fileext=".sha512"> <checksum algorithm="sha-512" fileext=".sha512">
@ -398,6 +410,8 @@
<include name="*.jar"/> <include name="*.jar"/>
<include name="*.zip"/> <include name="*.zip"/>
<include name="*.gz"/> <include name="*.gz"/>
<include name="*.cyclonedx.json"/>
<include name="*.cyclonedx.xml"/>
</fileset> </fileset>
</checksum> </checksum>
</target> </target>
@ -471,6 +485,8 @@
asciiarmor="true"> asciiarmor="true">
<fileset dir="${distrib.dir}"> <fileset dir="${distrib.dir}">
<include name="**/*.pom"/> <include name="**/*.pom"/>
<include name="**/*-cyclonedx.json"/>
<include name="**/*-cyclonedx.xml"/>
<include name="**/*.jar"/> <include name="**/*.jar"/>
<include name="**/*.zip"/> <include name="**/*.zip"/>
<include name="**/*.gz"/> <include name="**/*.gz"/>
@ -556,6 +572,8 @@
<artifact name="ivy" ext="pom" type="ivy"/> <artifact name="ivy" ext="pom" type="ivy"/>
<artifact name="ivy" ext="jar" type="sources" classifier="sources"/> <artifact name="ivy" ext="jar" type="sources" classifier="sources"/>
<artifact name="ivy" ext="jar" type="javadoc" classifier="javadoc"/> <artifact name="ivy" ext="jar" type="javadoc" classifier="javadoc"/>
<artifact name="ivy" ext="xml" type="cyclonedx.xml" classifier="cyclonedx"/>
<artifact name="ivy" ext="json" type="cyclonedx.json" classifier="cyclonedx"/>
</ivy2:publish> </ivy2:publish>
</target> </target>
@ -563,7 +581,7 @@
depends="/localivy,clean-ivy-home,clean,clean-lib,snapshot-version,install,clean-examples,test-report"/> depends="/localivy,clean-ivy-home,clean,clean-lib,snapshot-version,install,clean-examples,test-report"/>
<target name="snapshot" <target name="snapshot"
depends="prepare-snapshot,snapshot-src,snapshot-bin,snapshot-maven2,snapshot-checksums" depends="prepare-snapshot,snapshot-src,snapshot-bin,snapshot-maven2,sboms,snapshot-checksums"
description="used for nightly and integration builds"/> description="used for nightly and integration builds"/>
<target name="release" <target name="release"
@ -637,4 +655,392 @@
</generate-tagsdoc> </generate-tagsdoc>
</target> </target>
<target name="define-cyclonedx-components">
<ivy:cachepath organisation="org.apache.ant"
module="ant-cyclonedx"
revision="${ant-cyclonedx.version}"
inline="true" conf="default"
pathid="cyclonedx.classpath"
log="download-only"/>
<typedef uri="antlib:org.apache.ant.cyclonedx"
resource="org/apache/ant/cyclonedx/antlib.xml"
classpathref="cyclonedx.classpath"/>
<!-- common definitions for SBOMs -->
<cdx:organization
name="Apache Ant Project Management Committee"
id="ant-pmc"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<url url="https://ant.apache.org/"/>
</cdx:organization>
<cdx:license
licenseId="Apache-2.0"
id="apache-2"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<url url="https://www.apache.org/licenses/LICENSE-2.0.txt"/>
</cdx:license>
<cdx:externalreferenceset
id="ant-common-refs"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="LICENSE"
url="https://www.apache.org/licenses/LICENSE-2.0.txt"/>
<externalReference
type="SECURITY_CONTACT"
url="https://www.apache.org/security/"/>
</cdx:externalreferenceset>
<cdx:externalreferenceset
id="ivy-ext-refs"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="MAILING_LIST"
url="https://ant.apache.org/ivy/mailing-lists.html"/>
<externalReference
type="VCS"
url="https://gitbox.apache.org/repos/asf/ant-ivy.git"/>
<externalReference
type="BUILD_SYSTEM"
url="https://ci-builds.apache.org/job/Ant/job/Ivy/"/>
<externalReference
type="ISSUE_TRACKER"
url="http://issues.apache.org/jira/browse/IVY"/>
<externalReference
type="WEBSITE"
url="https://ant.apache.org/ivy/"/>
<externalReference
type="DISTRIBUTION"
url="https://ant.apache.org/ivy/download.cgi"/>
<externalReference
type="SOURCE_DISTRIBUTION"
url="https://ant.apache.org/ivy/download.cgi"/>
<externalReference
type="ADVISORIES"
url="https://ant.apache.org/ivy/security.html"/>
</cdx:externalreferenceset>
<cdx:externalreferenceset
id="ant-ext-refs"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="MAILING_LIST"
url="https://ant.apache.org/mail.html"/>
<externalReference
type="VCS"
url="https://gitbox.apache.org/repos/asf/ant.git"/>
<externalReference
type="BUILD_SYSTEM"
url="https://ci-builds.apache.org/job/Ant/"/>
<externalReference
type="ISSUE_TRACKER"
url="https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"/>
<externalReference
type="WEBSITE"
url="https://ant.apache.org/"/>
<externalReference
type="DISTRIBUTION"
url="https://ant.apache.org/bindownload.cgi"/>
<externalReference
type="SOURCE_DISTRIBUTION"
url="https://ant.apache.org/srcdownload.cgi"/>
<externalReference
type="ADVISORIES"
url="https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"/>
<externalReference
type="DOCUMENTATION"
url="https://ant.apache.org/manual/"/>
</cdx:externalreferenceset>
</target>
<target name="jar-sbom" depends="define-cyclonedx-components,jar">
<cdx:componentbom
bomName="ivy-${build.version}-cyclonedx"
outputdirectory="${artifacts.build.dir}/jars"
format="all"
useComponentSupplier="true"
useComponentManufacturer="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<component
name="ivy"
group="org.apache.ivy"
version="${build.version}"
description="Apache Ivy"
publisher="The Apache Software Foundation"
supplierIsManufacturer="true">
<file file="${artifacts.build.dir}/jars/${final.name}"/>
<supplier refid="ant-pmc"/>
<license refid="apache-2"/>
<externalReferenceSet refid="ant-common-refs"/>
<externalReferenceSet refid="ivy-ext-refs"/>
<dependency componentRef="cdx-ant"/>
<dependency componentRef="cdx-httpclient"/>
<dependency componentRef="cdx-commons-compress"/>
<dependency componentRef="cdx-commons-vfs2"/>
<dependency componentRef="cdx-apache-oro"/>
<dependency componentRef="cdx-jsch"/>
<dependency componentRef="cdx-jsch.agentproxy"/>
<dependency componentRef="cdx-jsch.agentproxy.connector-factory"/>
<dependency componentRef="cdx-jsch.agentproxy.jsch"/>
<dependency componentRef="cdx-bcpg-jdk15on"/>
<dependency componentRef="cdx-bcprov-jdk15on"/>
<dependency componentRef="cdx-commons-codec"/>
</component>
<license refid="apache-2"/>
<additionalComponent
name="ant"
group="org.apache.ant"
version="${apache-ant.version}"
isExternal="true"
id="cdx-ant">
<supplier refid="ant-pmc"/>
<license refid="apache-2"/>
<externalReferenceSet refid="ant-common-refs"/>
<externalReferenceSet refid="ant-ext-refs"/>
<dependency componentRef="cdx-ant-launcher"/>
</additionalComponent>
<additionalComponent
name="ant-launcher"
group="org.apache.ant"
version="${apache-ant.version}"
isExternal="true"
id="cdx-ant-launcher">
<supplier refid="ant-pmc"/>
<license refid="apache-2"/>
<externalReferenceSet refid="ant-common-refs"/>
<externalReferenceSet refid="ant-ext-refs"/>
</additionalComponent>
<additionalComponent
id="cdx-httpclient"
name="httpclient"
group="org.apache.httpcomponents"
version="${httpclient.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
<dependency componentRef="cdx-commons-codec"/>
<dependency componentRef="cdx-commons-logging"/>
</additionalComponent>
<additionalComponent
id="cdx-commons-logging"
name="commons-logging"
group="org.apache.commons"
version="1.2"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
</additionalComponent>
<additionalComponent
id="cdx-commons-compress"
name="commons-compress"
group="org.apache.commons"
version="${commons-compress.version}"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
</additionalComponent>
<additionalComponent
id="cdx-commons-vfs2"
name="commons-vfs2"
group="org.apache.commons"
version="${commons-vfs2.version}"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
</additionalComponent>
<additionalComponent
id="cdx-apache-oro"
name="oro"
group="oro"
version="${oro.version}"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
</additionalComponent>
<additionalComponent
id="cdx-jsch"
name="jsch"
group="com.jcraft"
description="JSch is a pure Java implementation of SSH2"
version="${jsch.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="WEBSITE"
url="http://www.jcraft.com/"/>
<license name="Revised BSD">
<url url="http://www.jcraft.com/jsch/LICENSE.txt"/>
</license>
</additionalComponent>
<additionalComponent
id="cdx-jsch.agentproxy"
name="jsch.agentproxy"
group="com.jcraft"
description="a proxy to ssh-agent and Pageant in Java "
version="${jsch.agentproxy.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="WEBSITE"
url="http://www.jcraft.com/"/>
<license name="Revised BSD">
<url url="http://www.jcraft.com/jsch/LICENSE.txt"/>
</license>
</additionalComponent>
<additionalComponent
id="cdx-jsch.agentproxy.connector-factory"
name="jsch.agentproxy.connector-factory"
group="com.jcraft"
description="a connector factory"
version="${jsch.agentproxy.version}"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="WEBSITE"
url="http://www.jcraft.com/"/>
<license name="Revised BSD">
<url url="http://www.jcraft.com/jsch/LICENSE.txt"/>
</license>
</additionalComponent>
<additionalComponent
id="cdx-jsch.agentproxy.jsch"
name="jsch.agentproxy.jsch"
group="com.jcraft"
description="a library to use jsch-agent-proxy with JSch"
version="${jsch.agentproxy.version}"
unknownDependencies="true"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<externalReference
type="WEBSITE"
url="http://www.jcraft.com/"/>
<license name="Revised BSD">
<url url="http://www.jcraft.com/jsch/LICENSE.txt"/>
</license>
</additionalComponent>
<additionalComponent
id="cdx-commons-codec"
name="commons-codec"
group="org.apache.commons"
version="${commons-codec.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license refid="apache-2"/>
</additionalComponent>
<additionalComponent
id="cdx-bcpg-jdk15on"
name="bcpg-jdk15on"
group="org.bouncycastle"
version="${bouncycastle.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license name="Bouncy Castle Licence">
<url url="https://www.bouncycastle.org/licence.html"/>
</license>
<dependency componentRef="cdx-bcprov-jdk15on"/>
</additionalComponent>
<additionalComponent
id="cdx-bcprov-jdk15on"
name="bcprov-jdk15on"
group="org.bouncycastle"
version="${bouncycastle.version}"
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<license name="Bouncy Castle Licence">
<url url="https://www.bouncycastle.org/licence.html"/>
</license>
</additionalComponent>
</cdx:componentbom>
</target>
<target name="prepare-distribution-sboms" depends="define-cyclonedx-components">
<macrodef name="create-tarball-bom">
<attribute name="binsrc"/>
<attribute name="binarysource"/>
<attribute name="ext"/>
<element name="archiveContent"/>
<element name="moreComponentChildren" optional="true"/>
<sequential
xmlns:cdx="antlib:org.apache.ant.cyclonedx">
<cdx:componentbom
bomName="${snapshot.full.name}-@{binsrc}.@{ext}.cyclonedx"
outputdirectory="${distrib.dir}/dist/${build.version}"
format="all"
useComponentManufacturer="true"
useComponentSupplier="true">
<component
version="${build.version}"
purl="https://archive.apache.org/dist/ant/ivy/${build.version}/${snapshot.full.name}-@{binsrc}.@{ext}"
name="https://archive.apache.org/dist/ant/ivy/${build.version}/${snapshot.full.name}-@{binsrc}.@{ext}"
description="Apache Ivy @{binarysource}"
publisher="The Apache Software Foundation"
type="file"
supplierIsManufacturer="true">
<file file="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-@{binsrc}.@{ext}"/>
<supplier refid="ant-pmc"/>
<license refid="apache-2"/>
<externalReferenceSet refid="ant-common-refs"/>
<externalReferenceSet refid="ivy-ext-refs"/>
<moreComponentChildren/>
</component>
<pureFileComponents>
<archiveContent/>
</pureFileComponents>
<license refid="apache-2"/>
</cdx:componentbom>
</sequential>
</macrodef>
<macrodef name="create-tarball-boms">
<attribute name="binsrc"/>
<attribute name="binarysource"/>
<element name="componentChildren" implicit="true" optional="true"/>
<sequential>
<mkdir dir="${build.dir}/sbom/@{binsrc}"/>
<unzip dest="${build.dir}/sbom/@{binsrc}"
src="${distrib.dir}/dist/${build.version}/${snapshot.full.name}-@{binsrc}.zip"/>
<create-tarball-bom
binsrc="@{binsrc}"
binarysource="@{binarysource}"
ext="tar.gz">
<moreComponentChildren>
<componentChildren/>
</moreComponentChildren>
<archiveContent>
<fileset dir="${build.dir}/sbom/@{binsrc}" defaultexcludes="no"/>
</archiveContent>
</create-tarball-bom>
<create-tarball-bom
binsrc="@{binsrc}"
binarysource="@{binarysource}"
ext="zip">
<moreComponentChildren>
<componentChildren/>
</moreComponentChildren>
<archiveContent>
<fileset dir="${build.dir}/sbom/@{binsrc}" defaultexcludes="no"/>
</archiveContent>
</create-tarball-bom>
<delete dir="${build.dir}/sbom/@{binsrc}"/>
</sequential>
</macrodef>
</target>
<target name="src-tarball-sboms"
depends="prepare-distribution-sboms,snapshot-src">
<create-tarball-boms binsrc="src" binarysource="Source Distribution"/>
</target>
<target name="bin-tarball-sboms"
depends="prepare-distribution-sboms,snapshot-bin">
<create-tarball-boms binsrc="bin"
binarysource="Binary Distribution">
<component>
<sbomLink>
<file file="${artifacts.build.dir}/jars/ivy-${build.version}-cyclonedx.json"/>
</sbomLink>
<file file="${artifacts.build.dir}/jars/${final.name}"/>
</component>
</create-tarball-boms>
<create-tarball-boms binsrc="bin-with-deps"
binarysource="Binary Distribution with Dependencies">
<component>
<sbomLink>
<file file="${artifacts.build.dir}/jars/ivy-${build.version}-cyclonedx.json"/>
</sbomLink>
<file file="${artifacts.build.dir}/jars/${final.name}"/>
</component>
</create-tarball-boms>
</target>
<target name="sboms" depends="src-tarball-sboms,bin-tarball-sboms"/>
</project> </project>

14371
sboms/apache-ivy-2.6.0-bin-with-deps.tar.gz.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

14371
sboms/apache-ivy-2.6.0-bin-with-deps.zip.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

13687
sboms/apache-ivy-2.6.0-bin.tar.gz.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

13687
sboms/apache-ivy-2.6.0-bin.zip.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

94078
sboms/apache-ivy-2.6.0-src.tar.gz.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

94078
sboms/apache-ivy-2.6.0-src.zip.cyclonedx.json Normal file
View File

File diff suppressed because it is too large Load Diff

627
sboms/ivy-2.6.0-cyclonedx.json Normal file
View File

@ -0,0 +1,627 @@
{
"bomFormat" : "CycloneDX",
"specVersion" : "1.6",
"serialNumber" : "urn:uuid:7d194c03-c1c2-4ff0-ae46-2d792d78444a",
"version" : 1,
"metadata" : {
"timestamp" : "2026-06-06T16:42:37Z",
"lifecycles" : [
{
"phase" : "build"
}
],
"tools" : {
"components" : [
{
"type" : "library",
"supplier" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"manufacturer" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"publisher" : "The Apache Software Foundation",
"group" : "org.apache.ant",
"name" : "ant-cyclonedx",
"version" : "0.1",
"description" : "Apache CycloneDX Antlib",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.ant/ant-cyclonedx@0.1?type=jar",
"externalReferences" : [
{
"type" : "vcs",
"url" : "https://gitbox.apache.org/repos/asf/ant-antlibs-cyclonedx.git"
},
{
"type" : "license",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
},
{
"type" : "build-system",
"url" : "https://ci-builds.apache.org/job/Ant/job/CycloneDX%20Antlib/"
},
{
"type" : "mailing-list",
"url" : "https://ant.apache.org/mail.html"
},
{
"type" : "issue-tracker",
"url" : "https://bz.apache.org/bugzilla/buglist.cgi?component=CycloneDX%20Antlib&product=Ant"
},
{
"type" : "website",
"url" : "https://ant.apache.org/antlibs/cyclonedx/"
},
{
"type" : "distribution",
"url" : "https://ant.apache.org/antlibs/bindownload.cgi"
},
{
"type" : "source-distribution",
"url" : "https://ant.apache.org/antlibs/srcdownload.cgi"
},
{
"type" : "security-contact",
"url" : "https://www.apache.org/security/"
}
]
}
]
},
"component" : {
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
"supplier" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"manufacturer" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"publisher" : "The Apache Software Foundation",
"group" : "org.apache.ivy",
"name" : "ivy",
"version" : "2.6.0",
"description" : "Apache Ivy",
"hashes" : [
{
"alg" : "MD5",
"content" : "6e19d72c37ac0da229c702add274a648"
},
{
"alg" : "SHA-1",
"content" : "49b9e007786b827fdd86b02b8125acb6d0f54801"
},
{
"alg" : "SHA-256",
"content" : "af70c4189d6a371f798245a58304e7de10e63fda4e14375882e610fed5c55464"
},
{
"alg" : "SHA-512",
"content" : "89e11d7c4ef8c0aaf6bed8a52b837fcf5155e6efe63b9d6ab712a63db781e1f5e604dfc7a9e0381d3c1b0e934f5989027b96fab391d8cc4cef1b42e3e0f446b8"
},
{
"alg" : "SHA3-256",
"content" : "e67efa3e80440683b299f4c0bb4900ec433f31e33f53e2705e372ca66e9a0235"
},
{
"alg" : "SHA3-512",
"content" : "781e8169d8a894224d4c54ad600fce71592058ecbe2a982059e79ec3b72933292cefff574ed848823e7c22629ddbc59b0102a38730b16aef39e0463a819efa6b"
},
{
"alg" : "SHA-384",
"content" : "73db2f2125e7e6cf963174d244472844a57615cb942b2197d4dd092d1fe090010eb4644ba2c17ac0002abba15508513e"
},
{
"alg" : "SHA3-384",
"content" : "8917d0a675261d96e412a2a9dbe14242c12d346c60f0565ce949266036fac9f417263cedc3c62aaa9e62f455f9129497"
}
],
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
"externalReferences" : [
{
"type" : "license",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
},
{
"type" : "security-contact",
"url" : "https://www.apache.org/security/"
},
{
"type" : "mailing-list",
"url" : "https://ant.apache.org/ivy/mailing-lists.html"
},
{
"type" : "vcs",
"url" : "https://gitbox.apache.org/repos/asf/ant-ivy.git"
},
{
"type" : "build-system",
"url" : "https://ci-builds.apache.org/job/Ant/job/Ivy/"
},
{
"type" : "issue-tracker",
"url" : "http://issues.apache.org/jira/browse/IVY"
},
{
"type" : "website",
"url" : "https://ant.apache.org/ivy/"
},
{
"type" : "distribution",
"url" : "https://ant.apache.org/ivy/download.cgi"
},
{
"type" : "source-distribution",
"url" : "https://ant.apache.org/ivy/download.cgi"
},
{
"type" : "advisories",
"url" : "https://ant.apache.org/ivy/security.html"
}
]
},
"manufacturer" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"supplier" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
]
},
"components" : [
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.ant/ant@1.9.16?type=jar",
"supplier" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"group" : "org.apache.ant",
"name" : "ant",
"version" : "1.9.16",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.ant/ant@1.9.16?type=jar",
"externalReferences" : [
{
"type" : "license",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
},
{
"type" : "security-contact",
"url" : "https://www.apache.org/security/"
},
{
"type" : "mailing-list",
"url" : "https://ant.apache.org/mail.html"
},
{
"type" : "vcs",
"url" : "https://gitbox.apache.org/repos/asf/ant.git"
},
{
"type" : "build-system",
"url" : "https://ci-builds.apache.org/job/Ant/"
},
{
"type" : "issue-tracker",
"url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
},
{
"type" : "website",
"url" : "https://ant.apache.org/"
},
{
"type" : "distribution",
"url" : "https://ant.apache.org/bindownload.cgi"
},
{
"type" : "source-distribution",
"url" : "https://ant.apache.org/srcdownload.cgi"
},
{
"type" : "advisories",
"url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
},
{
"type" : "documentation",
"url" : "https://ant.apache.org/manual/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.ant/ant-launcher@1.9.16?type=jar",
"supplier" : {
"name" : "Apache Ant Project Management Committee",
"url" : [
"https://ant.apache.org/"
]
},
"group" : "org.apache.ant",
"name" : "ant-launcher",
"version" : "1.9.16",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.ant/ant-launcher@1.9.16?type=jar",
"externalReferences" : [
{
"type" : "license",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
},
{
"type" : "security-contact",
"url" : "https://www.apache.org/security/"
},
{
"type" : "mailing-list",
"url" : "https://ant.apache.org/mail.html"
},
{
"type" : "vcs",
"url" : "https://gitbox.apache.org/repos/asf/ant.git"
},
{
"type" : "build-system",
"url" : "https://ci-builds.apache.org/job/Ant/"
},
{
"type" : "issue-tracker",
"url" : "https://bz.apache.org/bugzilla/buglist.cgi?product=Ant"
},
{
"type" : "website",
"url" : "https://ant.apache.org/"
},
{
"type" : "distribution",
"url" : "https://ant.apache.org/bindownload.cgi"
},
{
"type" : "source-distribution",
"url" : "https://ant.apache.org/srcdownload.cgi"
},
{
"type" : "advisories",
"url" : "https://ant.apache.org/security.html#Apache%20Ant%20Security%20Vulnerabilities"
},
{
"type" : "documentation",
"url" : "https://ant.apache.org/manual/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
"group" : "org.apache.httpcomponents",
"name" : "httpclient",
"version" : "4.5.13",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.commons/commons-logging@1.2?type=jar",
"group" : "org.apache.commons",
"name" : "commons-logging",
"version" : "1.2",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.commons/commons-logging@1.2?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
"group" : "org.apache.commons",
"name" : "commons-compress",
"version" : "1.27.1",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
"group" : "org.apache.commons",
"name" : "commons-vfs2",
"version" : "2.2",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/oro/oro@2.0.8?type=jar",
"group" : "oro",
"name" : "oro",
"version" : "2.0.8",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/oro/oro@2.0.8?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
"group" : "com.jcraft",
"name" : "jsch",
"version" : "0.1.55",
"description" : "JSch is a pure Java implementation of SSH2",
"licenses" : [
{
"license" : {
"name" : "Revised BSD",
"url" : "http://www.jcraft.com/jsch/LICENSE.txt"
}
}
],
"purl" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "http://www.jcraft.com/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
"group" : "com.jcraft",
"name" : "jsch.agentproxy",
"version" : "0.0.9",
"description" : "a proxy to ssh-agent and Pageant in Java",
"licenses" : [
{
"license" : {
"name" : "Revised BSD",
"url" : "http://www.jcraft.com/jsch/LICENSE.txt"
}
}
],
"purl" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "http://www.jcraft.com/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
"group" : "com.jcraft",
"name" : "jsch.agentproxy.connector-factory",
"version" : "0.0.9",
"description" : "a connector factory",
"licenses" : [
{
"license" : {
"name" : "Revised BSD",
"url" : "http://www.jcraft.com/jsch/LICENSE.txt"
}
}
],
"purl" : "pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "http://www.jcraft.com/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
"group" : "com.jcraft",
"name" : "jsch.agentproxy.jsch",
"version" : "0.0.9",
"description" : "a library to use jsch-agent-proxy with JSch",
"licenses" : [
{
"license" : {
"name" : "Revised BSD",
"url" : "http://www.jcraft.com/jsch/LICENSE.txt"
}
}
],
"purl" : "pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
"externalReferences" : [
{
"type" : "website",
"url" : "http://www.jcraft.com/"
}
]
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
"group" : "org.apache.commons",
"name" : "commons-codec",
"version" : "1.18.0",
"licenses" : [
{
"license" : {
"id" : "Apache-2.0",
"url" : "https://www.apache.org/licenses/LICENSE-2.0.txt"
}
}
],
"purl" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
"group" : "org.bouncycastle",
"name" : "bcpg-jdk15on",
"version" : "1.70",
"licenses" : [
{
"license" : {
"name" : "Bouncy Castle Licence",
"url" : "https://www.bouncycastle.org/licence.html"
}
}
],
"purl" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar"
},
{
"type" : "library",
"bom-ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
"group" : "org.bouncycastle",
"name" : "bcprov-jdk15on",
"version" : "1.70",
"licenses" : [
{
"license" : {
"name" : "Bouncy Castle Licence",
"url" : "https://www.bouncycastle.org/licence.html"
}
}
],
"purl" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
}
],
"dependencies" : [
{
"ref" : "pkg:maven/org.apache.ivy/ivy@2.6.0?type=jar",
"dependsOn" : [
"pkg:maven/org.apache.ant/ant@1.9.16?type=jar",
"pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
"pkg:maven/org.apache.commons/commons-compress@1.27.1?type=jar",
"pkg:maven/org.apache.commons/commons-vfs2@2.2?type=jar",
"pkg:maven/oro/oro@2.0.8?type=jar",
"pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
"pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
"pkg:maven/com.jcraft/jsch.agentproxy.connector-factory@0.0.9?type=jar",
"pkg:maven/com.jcraft/jsch.agentproxy.jsch@0.0.9?type=jar",
"pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
"pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar"
]
},
{
"ref" : "pkg:maven/org.apache.ant/ant@1.9.16?type=jar",
"dependsOn" : [
"pkg:maven/org.apache.ant/ant-launcher@1.9.16?type=jar"
]
},
{
"ref" : "pkg:maven/org.apache.ant/ant-launcher@1.9.16?type=jar",
"dependsOn" : [ ]
},
{
"ref" : "pkg:maven/org.apache.httpcomponents/httpclient@4.5.13?type=jar",
"dependsOn" : [
"pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
"pkg:maven/org.apache.commons/commons-logging@1.2?type=jar"
]
},
{
"ref" : "pkg:maven/com.jcraft/jsch@0.1.55?type=jar",
"dependsOn" : [ ]
},
{
"ref" : "pkg:maven/com.jcraft/jsch.agentproxy@0.0.9?type=jar",
"dependsOn" : [ ]
},
{
"ref" : "pkg:maven/org.apache.commons/commons-codec@1.18.0?type=jar",
"dependsOn" : [ ]
},
{
"ref" : "pkg:maven/org.bouncycastle/bcpg-jdk15on@1.70?type=jar",
"dependsOn" : [
"pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar"
]
},
{
"ref" : "pkg:maven/org.bouncycastle/bcprov-jdk15on@1.70?type=jar",
"dependsOn" : [ ]
}
]
}

1
version.properties
View File

@ -31,6 +31,7 @@ target.ivy.bundle.version.qualifier=alpha_
# running Ant, so we could not use that name here. # running Ant, so we could not use that name here.
apache-ant.version=1.9.16 apache-ant.version=1.9.16
ant-contrib.version=1.0b3 ant-contrib.version=1.0b3
ant-cyclonedx.version=0.1
bouncycastle.version=1.70 bouncycastle.version=1.70
commons-codec.version=1.18.0 commons-codec.version=1.18.0
commons-compress.version=1.27.1 commons-compress.version=1.27.1