From 14f4266cb1d31964c481f3e22abdeddb9671be06 Mon Sep 17 00:00:00 2001
From: Stefan Kalscheuer <stefan@stklcode.de>
Date: Sat, 29 Jun 2024 13:35:10 +0200
Subject: [PATCH] build: generate and attach CycloneDX SBOM

---
 CHANGELOG.md |  3 +++
 pom.xml      | 21 +++++++++++++++++++++
 2 files changed, 24 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 132832a..be3e86f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,6 +5,9 @@ All notable changes to this project will be documented in this file.
 ### Dependencies
 * Updated Jackson dependency to 2.17.1
 
+### Improvement
+* Generate and attach CycloneDX SBOM
+
 
 ## 2.0.6 - 2024-03-23
 ### Dependencies
diff --git a/pom.xml b/pom.xml
index 33857af..e890161 100644
--- a/pom.xml
+++ b/pom.xml
@@ -200,6 +200,27 @@
             </build>
         </profile>
 
+        <profile>
+            <id>sbom</id>
+            <build>
+                <plugins>
+                    <plugin>
+                        <groupId>org.cyclonedx</groupId>
+                        <artifactId>cyclonedx-maven-plugin</artifactId>
+                        <version>2.8.0</version>
+                        <executions>
+                            <execution>
+                                <phase>package</phase>
+                                <goals>
+                                    <goal>makeBom</goal>
+                                </goals>
+                            </execution>
+                        </executions>
+                    </plugin>
+                </plugins>
+            </build>
+        </profile>
+
         <profile>
             <id>sign</id>
             <build>