Skip to content

Conversation

prabhu
Copy link
Collaborator

@prabhu prabhu commented Sep 16, 2025

cdxgen will now set a couple of properties cdx:maven:shaded and cdx:maven:unshadedNamespaces upon encountering a shaded jar. Attached is the SBOM generated for solr-9.9.0.

sbom-build-jar.cdx.json

Signed-off-by: Prabhu Subramanian <[email protected]>
@prabhu prabhu linked an issue Sep 16, 2025 that may be closed by this pull request
@prabhu prabhu marked this pull request as draft September 16, 2025 14:59
@prabhu
Copy link
Collaborator Author

prabhu commented Sep 16, 2025

Mandatory lockdown mode for three days.

@prabhu prabhu marked this pull request as ready for review September 16, 2025 21:55
@prabhu prabhu merged commit cbcbbdd into master Sep 17, 2025
81 checks passed
@prabhu prabhu deleted the feature/jar-shaded-detection branch September 17, 2025 07:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

maven legacy search has disappeared
1 participant