1. 7402318 transfer compositionAggregate from linked sbom by Stefan Bodewig · 7 days ago main
  2. fe902d2 add ability to state completeness of relationship description by Stefan Bodewig · 8 days ago
  3. 8cd3b19 update cyclonedx-core-java which dropped its commons dependencies by Stefan Bodewig · 11 days ago
  4. 4d48e63 make Ivy SBOM creation the default by Stefan Bodewig · 3 weeks ago
  5. 4747240 simplify setup by Stefan Bodewig · 3 weeks ago
  6. 4ad120a fix some javascript warnings by Stefan Bodewig · 3 weeks ago
  7. c87155b fix javadoc errors by Stefan Bodewig · 3 weeks ago
  8. f568de9 add support for license expressions by Stefan Bodewig · 3 weeks ago
  9. 61e4d8b refactor sbomLink and ivyModule into a reusable componentdef by Stefan Bodewig · 3 weeks ago
  10. 9030a62 add getters for all of components mutators by Stefan Bodewig · 3 weeks ago
  11. 7626f39 Merge pull request #2 from apache/support-ivy-as-component-source by Stefan Bodewig · 3 weeks ago
  12. 82d2093 add license external references from Ivy modules by Stefan Bodewig · 3 weeks ago
  13. 0af0c7c optimize by Stefan Bodewig · 3 weeks ago
  14. 2d21ab4 provide more metadata for Ivy by Stefan Bodewig · 3 weeks ago
  15. 783adc7 make cyclonedx-core-java guess SPDX license id when not specified by Stefan Bodewig · 3 weeks ago
  16. 43a48db add ivy/commons-codec dependencies in "manual SBOM" as well by Stefan Bodewig · 3 weeks ago
  17. f06c63f make templateComponent work for referenced components by Stefan Bodewig · 3 weeks ago
  18. f069bfd make it easier to supply additional data to Ivy dependencies by Stefan Bodewig · 3 weeks ago
  19. ec97eeb with ivyModule there is a good reason to resolve the main compoment by Stefan Bodewig · 3 weeks ago
  20. 3e937d2 I wouldnÄt really know how to test this, TBH by Stefan Bodewig · 3 weeks ago
  21. eaa90bb document the parts of ivyModule I've already written tests for by Stefan Bodewig · 3 weeks ago
  22. 71cb7f8 use classloader task to load ivy into antlib by Stefan Bodewig · 3 weeks ago
  23. 0ac76cf incomplete set of tests by Stefan Bodewig · 4 weeks ago
  24. 082a843 fix reference name with resolveId by Stefan Bodewig · 4 weeks ago
  25. d558b22 move sbomlink tests to separate build file by Stefan Bodewig · 4 weeks ago
  26. a8a2a49 SBOMs created manually and using Ivy by Stefan Bodewig · 4 weeks ago
  27. b48430a calculate hashes for Ivy dependencies retrieved by Stefan Bodewig · 4 weeks ago
  28. 23d0c48 deal with optional and external components by Stefan Bodewig · 5 weeks ago
  29. 1eb42e9 include provided dependencies in SBOM by Stefan Bodewig · 5 weeks ago
  30. 9adde4e initial implementation of Ivy based CycloneDX resolution by Stefan Bodewig · 7 weeks ago
  31. fa44fa0 deperecations in cyclonedx-core-java 13.x by Stefan Bodewig · 3 weeks ago
  32. b8da901 stop using raw types by Stefan Bodewig · 3 weeks ago
  33. 2a91ff7 mimic getBuildDate change of Ant's master branch by Stefan Bodewig · 3 weeks ago
  34. 6b257a1 update common antlib infrastructure by Stefan Bodewig · 3 weeks ago
  35. 4771e74 forgot to update pom by Stefan Bodewig · 4 weeks ago
  36. d805b06 explict version of commons-codec by Stefan Bodewig · 4 weeks ago
  37. 21b15ad new version of cyclonedx-core-java by Stefan Bodewig · 4 weeks ago
  38. 6187740 POM lacks a description by Stefan Bodewig · 5 weeks ago
  39. ecf3e24 fix comment by Stefan Bodewig · 5 weeks ago
  40. bdef35b explicitly mention BuildException in throws clause by Stefan Bodewig · 5 weeks ago
  41. 6b03d9b requires Java9+ to build SBOMs by Stefan Bodewig · 6 weeks ago
  42. 54bd034 sort nested components when they are used instead of before they are resolved by Stefan Bodewig · 7 weeks ago
  43. ee8074d used the same byte of the checksum twice by Stefan Bodewig · 7 weeks ago
  44. 9f81746 calculate a stable serial number if SOURCE_DATE_EPOCH is set by Stefan Bodewig · 7 weeks ago
  45. e719a82 location of ivy jar has changed by Stefan Bodewig · 7 weeks ago
  46. 581ae00 extract SBOM link reading from Component class by Stefan Bodewig · 7 weeks ago
  47. 394efc7 from a classloader perspective it is better to have Ivy provided externally by Stefan Bodewig · 7 weeks ago
  48. 6d59d3a remove build-system external reference by Stefan Bodewig · 7 weeks ago
  49. 1ca8ce0 add dependency on Ivy so I can start working on Ivy integration by Stefan Bodewig · 7 weeks ago
  50. 2b077a3 sort list valued BOM attributes for reproducible builds by Stefan Bodewig · 7 weeks ago
  51. d3a0498 make SBOM's timestamp honor reproducible builds requirements by Stefan Bodewig · 7 weeks ago
  52. e3fd8ef license headers by Stefan Bodewig · 7 weeks ago
  53. e234d1d update dependencies in SBOM by Stefan Bodewig · 7 weeks ago
  54. 56cb43d bump cyclonedx-core-java dependency, make CycloneDX 1.7 the new default by Stefan Bodewig · 7 weeks ago
  55. 71bf9f9 pick up Ivy update by Stefan Bodewig · 7 weeks ago
  56. 09ff42b allow a way to set the serial number of the generated BOM by Stefan Bodewig · 8 weeks ago
  57. 3b548b6 extract macrodef defined at least four times now into a task provided by the antlib by Stefan Bodewig · 3 months ago
  58. 4d111ad stray closing p tag by Stefan Bodewig · 3 months ago
  59. d88a460 import bugfixes of common build by Stefan Bodewig · 3 months ago
  60. 71cb81d adjust ivy.xml by Stefan Bodewig · 3 months ago
  61. 9576d5e CycloneDX Spec prefers .cdx.json by Stefan Bodewig · 3 months ago
  62. b7a80e8 AntUnit 1.5.0 by Stefan Bodewig · 3 months ago
  63. e6ed5aa user common setup for SBOM by Stefan Bodewig · 3 months ago
  64. 9d284f5 since Locator is used directly, the dependency on ant-launcher is no longer just transitive by Stefan Bodewig · 3 months ago
  65. cd13226 new resource collection that will help with SBOMs for tarballs by Stefan Bodewig · 3 months ago
  66. 64a0117 typo by Stefan Bodewig · 3 months ago
  67. 2734d6c document the SHA3 "problem" by Stefan Bodewig · 3 months ago
  68. 4ac4b16 use Ant's Locator instead of reinventing it by Stefan Bodewig · 3 months ago
  69. e9b0e88 fix locating of Antlib jar for tool information by Stefan Bodewig · 3 months ago
  70. b6f81af also add documentation link to tool-meta by Stefan Bodewig · 3 months ago
  71. 23571d9 the BSI TR is not binding for the EU CRA, yet. Things may change. by Stefan Bodewig · 3 months ago
  72. a873e80 maybe you sometimes don't want bom-externalReferences for internal SBOMs by Stefan Bodewig · 3 months ago
  73. 42969cc add security.txt link to tool component as well by Stefan Bodewig · 3 months ago
  74. 1e9928e Ant has got a security.txt by Stefan Bodewig · 3 months ago
  75. 477e65f add bom-type externalreferences when sbomLink is used by Stefan Bodewig · 3 months ago
  76. 8fd4694 add properties required by BSI TR for EU CRA by Stefan Bodewig · 3 months ago
  77. caad2b6 introduce propertyset by Stefan Bodewig · 3 months ago
  78. 59936ed more external references by Stefan Bodewig · 3 months ago
  79. 66199c1 archiveUrl is wrong by Stefan Bodewig · 3 months ago
  80. 1d1e1a7 no longer need the examples, we've got a real release to show now by Stefan Bodewig · 3 months ago
  81. 1af2644 prepare RC1 of 0.1 by Stefan Bodewig · 3 months ago
  82. 20fbdfb antlibs have got an extra directory layer for their releases by Stefan Bodewig · 3 months ago
  83. 450bf63 don't poison metadata cache with extra tool data by Stefan Bodewig · 3 months ago
  84. 48f8669 still trying to understand the Gump failure by Stefan Bodewig · 3 months ago
  85. bd9b56e update common to select fat-distribution configuration by Stefan Bodewig · 3 months ago
  86. f76f840 I don't want provided or test dependencies in fat-jar by Stefan Bodewig · 3 months ago
  87. 47673a4 add manufacturer to SBOM to make EU CRA happy by Stefan Bodewig · 3 months ago
  88. c2a45a4 last update was incomplete by Stefan Bodewig · 3 months ago
  89. 7fc2f22 remove distributionbom for now by Stefan Bodewig · 3 months ago
  90. 4c0b03d make supplier take the lead over manufacturer by Stefan Bodewig · 3 months ago
  91. a8ecf93 become more formal by Stefan Bodewig · 3 months ago
  92. 2f545ed add warning about API instability by Stefan Bodewig · 3 months ago
  93. 746867e try to fix Gump test failure by Stefan Bodewig · 3 months ago
  94. 14cb681 use gitbox instead of hithub for VCS links by Stefan Bodewig · 3 months ago
  95. 1c83c95 yes, please try it out by Stefan Bodewig · 3 months ago
  96. 167e89b use versioned dependencies in -withdeps tarballs by Stefan Bodewig · 3 months ago
  97. 86dc58e add license to BOMs by Stefan Bodewig · 3 months ago
  98. 08ae882 initial test for distributionbom by Stefan Bodewig · 3 months ago
  99. 70d9fa6 add jar as nested component to binary distribution SBOMs by Stefan Bodewig · 3 months ago
  100. d8c0f08 try to generalize logic for tarball boms by Stefan Bodewig · 3 months ago