sbom-enforcer:check

Full name:

io.github.sbom-enforcer:sbom-enforcer-maven-plugin:0.1.0:check

Description:

Performs a configurable set of checks on the SBOMs attached to the build.

See Rules for a list of available rules.

Attributes:

  • Requires a Maven project to be executed.
  • The goal is not marked as thread-safe and thus does not support parallel builds.
  • Binds by default to the lifecycle phase: verify.

Optional Parameters

Name Type Since Description
<forceDependencyUpdate> boolean - If set to true, the contents of the local Maven repository are ignored and artifacts are downloaded again from remote repositories.
Default: false
<rules> PlexusConfiguration - Configuration of the rules to execute.

Parameter Details

<forceDependencyUpdate>

If set to true, the contents of the local Maven repository are ignored and artifacts are downloaded again from remote repositories.
  • Type: boolean
  • Required: No
  • Default: false

<rules>

Configuration of the rules to execute.
  • Type: org.codehaus.plexus.configuration.PlexusConfiguration
  • Required: No