Merge pull request 'OZG-4833 add sbom to jar file' (#26) from...

Merge pull request 'OZG-4833 add sbom to jar file' (#26) from OZG-4833-add-sbom-to-jar-file into master

Reviewed-on: https://git.ozg-sh.de/ozgcloud-lib/common-lib/pulls/26


Reviewed-by: OZGCloud <ozgcloud@mgm-tp.com>

ozgcloud-common-parent/pom.xml

@@ -67,7 +67,6 @@
 		<git-commit-id-maven-plugin.version>7.0.0</git-commit-id-maven-plugin.version>
 
 		<dependency-track-maven-plugin.version>1.7.0</dependency-track-maven-plugin.version>
-		<cyclonedx-maven-plugin.version>2.8.1</cyclonedx-maven-plugin.version>
 	</properties>
 
 	<dependencyManagement>
@@ -363,12 +362,12 @@
 			<plugin>
 				<groupId>org.cyclonedx</groupId>
 				<artifactId>cyclonedx-maven-plugin</artifactId>
-				<version>${cyclonedx-maven-plugin.version}</version>
 				<executions>
 					<execution>
 						<phase>package</phase>
 						<goals>
 							<goal>makeAggregateBom</goal>
+							<goal>makeBom</goal>
 						</goals>
 					</execution>
 				</executions>
@@ -387,6 +386,16 @@
                 </executions>
             </plugin>
 		</plugins>
+
+		<resources>
+			<resource>
+				<directory>${project.build.outputDirectory}/META-INF/sbom</directory>
+				<includes>
+					<include>application.cdx.json</include>
+				</includes>
+				<targetPath>META-INF/sbom</targetPath>
+			</resource>
+		</resources>
 	</build>
 
 	<distributionManagement>