Exclude pmd-cli/pmd-dist from cyclonedx BOM

This should make the bom.xml/bom.json files be
reproducible again.
This commit is contained in:
Andreas Dangel 2024-04-18 09:44:07 +02:00
parent 4b14d4e757
commit 53aecb655d
No known key found for this signature in database
GPG Key ID: 93450DF2DF9A3FA3

12
pom.xml
View File

@ -756,6 +756,18 @@
<goals>
<goal>makeAggregateBom</goal>
</goals>
<configuration>
<!-- PMD is released in two phases: first everything without pmd-cli/pmd-dist
(profile cli-dist-modules disabled), and then only pmd-cli/pmd-dist.
The BOM for the main artifact net.sourceforge.pmd:pmd is created and published
in the first phase and doesn't contain pmd-cli/pmd-dist. In order to be able
to reproduce the BOM, we exclude this two modules always.
-->
<excludeArtifactId>
<artifactId>pmd-cli</artifactId>
<artifactId>pmd-dist</artifactId>
</excludeArtifactId>
</configuration>
</execution>
</executions>
</plugin>