1. 4771e74 forgot to update pom by Stefan Bodewig · 8 days ago main
  2. d805b06 explict version of commons-codec by Stefan Bodewig · 8 days ago
  3. 21b15ad new version of cyclonedx-core-java by Stefan Bodewig · 8 days ago
  4. 6187740 POM lacks a description by Stefan Bodewig · 11 days ago
  5. ecf3e24 fix comment by Stefan Bodewig · 11 days ago
  6. bdef35b explicitly mention BuildException in throws clause by Stefan Bodewig · 12 days ago
  7. 6b03d9b requires Java9+ to build SBOMs by Stefan Bodewig · 3 weeks ago
  8. 54bd034 sort nested components when they are used instead of before they are resolved by Stefan Bodewig · 3 weeks ago
  9. ee8074d used the same byte of the checksum twice by Stefan Bodewig · 3 weeks ago
  10. 9f81746 calculate a stable serial number if SOURCE_DATE_EPOCH is set by Stefan Bodewig · 3 weeks ago
  11. e719a82 location of ivy jar has changed by Stefan Bodewig · 3 weeks ago
  12. 581ae00 extract SBOM link reading from Component class by Stefan Bodewig · 4 weeks ago
  13. 394efc7 from a classloader perspective it is better to have Ivy provided externally by Stefan Bodewig · 4 weeks ago
  14. 6d59d3a remove build-system external reference by Stefan Bodewig · 4 weeks ago
  15. 1ca8ce0 add dependency on Ivy so I can start working on Ivy integration by Stefan Bodewig · 4 weeks ago
  16. 2b077a3 sort list valued BOM attributes for reproducible builds by Stefan Bodewig · 4 weeks ago
  17. d3a0498 make SBOM's timestamp honor reproducible builds requirements by Stefan Bodewig · 4 weeks ago
  18. e3fd8ef license headers by Stefan Bodewig · 4 weeks ago
  19. e234d1d update dependencies in SBOM by Stefan Bodewig · 4 weeks ago
  20. 56cb43d bump cyclonedx-core-java dependency, make CycloneDX 1.7 the new default by Stefan Bodewig · 4 weeks ago
  21. 71bf9f9 pick up Ivy update by Stefan Bodewig · 4 weeks ago
  22. 09ff42b allow a way to set the serial number of the generated BOM by Stefan Bodewig · 5 weeks ago
  23. 3b548b6 extract macrodef defined at least four times now into a task provided by the antlib by Stefan Bodewig · 8 weeks ago
  24. 4d111ad stray closing p tag by Stefan Bodewig · 8 weeks ago
  25. d88a460 import bugfixes of common build by Stefan Bodewig · 8 weeks ago
  26. 71cb81d adjust ivy.xml by Stefan Bodewig · 8 weeks ago
  27. 9576d5e CycloneDX Spec prefers .cdx.json by Stefan Bodewig · 8 weeks ago
  28. b7a80e8 AntUnit 1.5.0 by Stefan Bodewig · 8 weeks ago
  29. e6ed5aa user common setup for SBOM by Stefan Bodewig · 8 weeks ago
  30. 9d284f5 since Locator is used directly, the dependency on ant-launcher is no longer just transitive by Stefan Bodewig · 9 weeks ago
  31. cd13226 new resource collection that will help with SBOMs for tarballs by Stefan Bodewig · 9 weeks ago
  32. 64a0117 typo by Stefan Bodewig · 9 weeks ago
  33. 2734d6c document the SHA3 "problem" by Stefan Bodewig · 9 weeks ago
  34. 4ac4b16 use Ant's Locator instead of reinventing it by Stefan Bodewig · 9 weeks ago
  35. e9b0e88 fix locating of Antlib jar for tool information by Stefan Bodewig · 10 weeks ago
  36. b6f81af also add documentation link to tool-meta by Stefan Bodewig · 10 weeks ago
  37. 23571d9 the BSI TR is not binding for the EU CRA, yet. Things may change. by Stefan Bodewig · 10 weeks ago
  38. a873e80 maybe you sometimes don't want bom-externalReferences for internal SBOMs by Stefan Bodewig · 10 weeks ago
  39. 42969cc add security.txt link to tool component as well by Stefan Bodewig · 2 months ago
  40. 1e9928e Ant has got a security.txt by Stefan Bodewig · 2 months ago
  41. 477e65f add bom-type externalreferences when sbomLink is used by Stefan Bodewig · 2 months ago
  42. 8fd4694 add properties required by BSI TR for EU CRA by Stefan Bodewig · 2 months ago
  43. caad2b6 introduce propertyset by Stefan Bodewig · 2 months ago
  44. 59936ed more external references by Stefan Bodewig · 2 months ago
  45. 66199c1 archiveUrl is wrong by Stefan Bodewig · 2 months ago
  46. 1d1e1a7 no longer need the examples, we've got a real release to show now by Stefan Bodewig · 2 months ago
  47. 1af2644 prepare RC1 of 0.1 by Stefan Bodewig · 2 months ago
  48. 20fbdfb antlibs have got an extra directory layer for their releases by Stefan Bodewig · 2 months ago
  49. 450bf63 don't poison metadata cache with extra tool data by Stefan Bodewig · 3 months ago
  50. 48f8669 still trying to understand the Gump failure by Stefan Bodewig · 3 months ago
  51. bd9b56e update common to select fat-distribution configuration by Stefan Bodewig · 3 months ago
  52. f76f840 I don't want provided or test dependencies in fat-jar by Stefan Bodewig · 3 months ago
  53. 47673a4 add manufacturer to SBOM to make EU CRA happy by Stefan Bodewig · 3 months ago
  54. c2a45a4 last update was incomplete by Stefan Bodewig · 3 months ago
  55. 7fc2f22 remove distributionbom for now by Stefan Bodewig · 3 months ago
  56. 4c0b03d make supplier take the lead over manufacturer by Stefan Bodewig · 3 months ago
  57. a8ecf93 become more formal by Stefan Bodewig · 3 months ago
  58. 2f545ed add warning about API instability by Stefan Bodewig · 3 months ago
  59. 746867e try to fix Gump test failure by Stefan Bodewig · 3 months ago
  60. 14cb681 use gitbox instead of hithub for VCS links by Stefan Bodewig · 3 months ago
  61. 1c83c95 yes, please try it out by Stefan Bodewig · 3 months ago
  62. 167e89b use versioned dependencies in -withdeps tarballs by Stefan Bodewig · 3 months ago
  63. 86dc58e add license to BOMs by Stefan Bodewig · 3 months ago
  64. 08ae882 initial test for distributionbom by Stefan Bodewig · 3 months ago
  65. 70d9fa6 add jar as nested component to binary distribution SBOMs by Stefan Bodewig · 3 months ago
  66. d8c0f08 try to generalize logic for tarball boms by Stefan Bodewig · 3 months ago
  67. 7584d45 component bom-refs must be unique by Stefan Bodewig · 3 months ago
  68. fe4b81e ignore distribution directory by Stefan Bodewig · 3 months ago
  69. ef0063a don't apply group:name:version logic to purl of non-Java ecosystems by Stefan Bodewig · 3 months ago
  70. c9e60eb more explicit component definitions by Stefan Bodewig · 3 months ago
  71. 7d58ede upload CycloneDX SBOMs as well by Stefan Bodewig · 3 months ago
  72. 5536794 only re-generate SBOM when anything has changed by Stefan Bodewig · 3 months ago
  73. e15c591 POM with dependencies by Stefan Bodewig · 3 months ago
  74. 6501348 create SBOMs for the release archives by Stefan Bodewig · 3 months ago
  75. 47b22af create SBOM for this antlib by Stefan Bodewig · 3 months ago
  76. 0332838 properly use overridden dependencies of resolved components by Stefan Bodewig · 3 months ago
  77. 16204eb log something when you perform work by Stefan Bodewig · 3 months ago
  78. f747c8e javadoc warnings by Stefan Bodewig · 3 months ago
  79. 2406cae make a few methods more accessible by Stefan Bodewig · 3 months ago
  80. 8566c33 unused method by Stefan Bodewig · 3 months ago
  81. 2bdd91e allow other tools to be added to metadata.tools.components by Stefan Bodewig · 3 months ago
  82. 4211f01 ugrade common by Stefan Bodewig · 3 months ago
  83. 1cb11be add version to the docs by Stefan Bodewig · 3 months ago
  84. e3f3291 descrbe componentbom nested elements by Stefan Bodewig · 3 months ago
  85. d6d518e document attributes of componentbom task by Stefan Bodewig · 3 months ago
  86. 8b478d8 Merge pull request #1 from apache/infrastructure-ruleset-bot/default-branch-protection by Stefan Bodewig · 3 months ago
  87. b63c894 the SBOM itself can have a license by Stefan Bodewig · 3 months ago
  88. 358493d only copy licenses if there are any by Stefan Bodewig · 3 months ago
  89. 159b309 tweaks by Stefan Bodewig · 3 months ago
  90. eb3e778 properly describe what happens when linking external SBOMs by Stefan Bodewig · 3 months ago
  91. cbdb57c Set up default protection ruleset for default and release branches by The Apache Software Foundation · 3 months ago
  92. aebc4fd test refid handling by Stefan Bodewig · 3 months ago
  93. 7775f3f document and test nested components (and handle their dependencies) by Stefan Bodewig · 3 months ago
  94. 9583176 fail with a useful error message if dependees lack bom-ref by Stefan Bodewig · 3 months ago
  95. d3baf8b extend tests by Stefan Bodewig · 3 months ago
  96. ac4767a document the simple part of component and add some tests by Stefan Bodewig · 3 months ago
  97. 1d150fb allow component type and scope to be set using spec-names by Stefan Bodewig · 3 months ago
  98. 57a2261 document and test organization type by Stefan Bodewig · 3 months ago
  99. c13282e implicitly test "all" outputformat by Stefan Bodewig · 3 months ago
  100. d866632 make OutputFormat more useful by Stefan Bodewig · 3 months ago