CycloneDX Maven plugin – Plugin Documentation

Plugin Documentation

Goals available for this plugin:

Goal	Description
cyclonedx:makeAggregateBom	Creates a CycloneDX aggregate BOM at build root (with dependencies from the whole multi-modules build), and eventually a BOM for each module.
cyclonedx:makeBom	Creates a CycloneDX BOM for each Maven module with its dependencies.
cyclonedx:makePackageBom	Creates a CycloneDX BOM for each Maven module with `war` or `ear` packaging.

System Requirements

The following specifies the minimum requirements to run this Maven plugin:

Maven	3.1
JDK	1.8

Usage

You should specify the version in your project's plugin configuration:

<project>
  ...
  <build>
    <!-- To define the plugin version in your parent POM -->
    <pluginManagement>
      <plugins>
        <plugin>
          <groupId>org.cyclonedx</groupId>
          <artifactId>cyclonedx-maven-plugin</artifactId>
          <version>2.7.6-SNAPSHOT</version>
        </plugin>
        ...
      </plugins>
    </pluginManagement>
    <!-- To use the plugin goals in your POM or parent POM -->
    <plugins>
      <plugin>
        <groupId>org.cyclonedx</groupId>
        <artifactId>cyclonedx-maven-plugin</artifactId>
      </plugin>
      ...
    </plugins>
  </build>
  ...
</project>

For more information, see "Guide to Configuring Plug-ins"