如何为使用 Ant 构建的 Java 项目生成 Cyclonedx bom?
我已经生成 bom 并将它们与 Dependency Track 一起用于一些使用 Gradle 构建的项目。有一个 CycloneDx Gradle 插件非常适合此目的。不过,我也在处理许多使用 Ant 构建的较旧的 Java 项目。我一直无法在任何地方找到 Ant 工具来生成 bom。那里有吗?如果没有,生成 bom 文件的最佳方法是什么?
如果可以从 Windows 命令提示符完成,我可能可以使用它,因为我会将批处理脚本添加到我的 Jenkins 构建中。
I'm already generating boms and using them with Dependency Track for some projects built with Gradle. There's a CycloneDx Gradle plugin that works well for that. However I'm also working with many older Java projects that are built with Ant. I've not been able to find an Ant tool to generate the boms anywhere. Is there one out there? If not, what's the best way to generate the bom files?
If it can be done from a Windows command prompt, I can probably work with that as I'll add batch scripts to my Jenkins builds.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。

绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
尚未找到 ANT 集成。此外,CLI 尚不支持创建 BOM,但 CycloneDX 的 Java 核心应该能够生成 BOM:
https://github.com/CycloneDX/cyclonedx-core-java
Haven't found an ANT integration. Also the CLI doesn't support creating of BOMs just yet, but there exists a Java Core of CycloneDX that should be able to generate the BOMs:
https://github.com/CycloneDX/cyclonedx-core-java