From c25cedaaba031071ea1283af1c5a16f078b97d92 Mon Sep 17 00:00:00 2001
From: Calvin Kirs <acm_master@163.com>
Date: Thu, 16 May 2024 19:35:24 +0800
Subject: [PATCH] minor: Add SBOM to the project. (#12231)

---
 docs/en/changes/changes.md |  1 +
 pom.xml                    | 18 ++++++++++++++++++
 2 files changed, 19 insertions(+)

diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 3f0e239362..fc5ae99af6 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -2,6 +2,7 @@
 
 #### Project
 
+* Add SBOM (Software Bill of Materials) to the project.
 
 #### OAP Server
 
diff --git a/pom.xml b/pom.xml
index 133d4984f9..072320c25e 100755
--- a/pom.xml
+++ b/pom.xml
@@ -193,6 +193,7 @@
         <jmh.version>1.21</jmh.version>
         <checkstyle.fails.on.error>true</checkstyle.fails.on.error>
         <assertj-core.version>3.20.2</assertj-core.version>
+        <cyclonedx-maven-plugin.version>2.8.0</cyclonedx-maven-plugin.version>
 
         <skipUTs>false</skipUTs>
         <argLine>--add-opens java.base/java.lang=ALL-UNNAMED</argLine>
@@ -416,6 +417,19 @@
                         <arguments>-DskipTests</arguments>
                     </configuration>
                 </plugin>
+                <plugin>
+                    <groupId>org.cyclonedx</groupId>
+                    <artifactId>cyclonedx-maven-plugin</artifactId>
+                    <version>${cyclonedx-maven-plugin.version}</version>
+                    <executions>
+                        <execution>
+                            <phase>package</phase>
+                            <goals>
+                                <goal>makeBom</goal>
+                            </goals>
+                        </execution>
+                    </executions>
+                </plugin>
             </plugins>
         </pluginManagement>
         <plugins>
@@ -546,6 +560,10 @@
                     </sourcepath>
                 </configuration>
             </plugin>
+            <plugin>
+                <groupId>org.cyclonedx</groupId>
+                <artifactId>cyclonedx-maven-plugin</artifactId>
+            </plugin>
         </plugins>
     </build>
 </project>