From 308f7ec783bd4de3f61f50aa39ac7b4c488b322a Mon Sep 17 00:00:00 2001
From: Patrick Baumgartner <patrick.baumgartner@42talents.com>
Date: Sun, 26 May 2024 12:46:57 +0200
Subject: [PATCH] Including CycloneDX for SBOM generation

---
 build.gradle |  1 +
 pom.xml      | 10 ++++++++--
 2 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/build.gradle b/build.gradle
index c398ece4c..fa6ff0cef 100644
--- a/build.gradle
+++ b/build.gradle
@@ -3,6 +3,7 @@ plugins {
   id 'org.springframework.boot' version '3.3.0'
   id 'io.spring.dependency-management' version '1.1.5'
   id 'org.graalvm.buildtools.native' version '0.10.2'
+  id 'org.cyclonedx.bom' version '1.8.2'
   id 'io.spring.javaformat' version '0.0.41'
   id "io.spring.nohttp" version "0.0.11"
 }
diff --git a/pom.xml b/pom.xml
index f232ffc58..a9bbd2959 100644
--- a/pom.xml
+++ b/pom.xml
@@ -257,8 +257,8 @@
         </executions>
       </plugin>
 
-      <!-- Spring Boot Actuator displays build-related information if a git.properties
-        file is present at the classpath -->
+      <!-- Spring Boot Actuator displays build-related information if a git.properties file is
+      present at the classpath -->
       <plugin>
         <groupId>io.github.git-commit-id</groupId>
         <artifactId>git-commit-id-maven-plugin</artifactId>
@@ -267,6 +267,12 @@
           <failOnUnableToExtractRepoInfo>false</failOnUnableToExtractRepoInfo>
         </configuration>
       </plugin>
+      <!-- Spring Boot Actuator displays sbom-related information if a CycloneDX SBOM file is
+      present at the classpath -->
+      <plugin>
+        <groupId>org.cyclonedx</groupId>
+        <artifactId>cyclonedx-maven-plugin</artifactId>
+      </plugin>
 
     </plugins>
   </build>