cyclonedx-maven-plugin icon indicating copy to clipboard operation
cyclonedx-maven-plugin copied to clipboard

exclude dependencies with other goals than makeAggregateBom

Open SemmelJochen opened this issue 2 years ago • 2 comments

I'm having a hard time excluding specific dependencies. In our project, we need to use the makeBom goal, because it is a multi-module project and we just want to build specific modules. When we use makeAggregateBom, the whole Project build for every module included, thus we use makeBom as a goal. Now we need to exclude specific dependencies. Sadly it seems like it does only work with the makeAggregateBom goal. I tried the excludeArtifactId option as a parameter when calling and as a configuration in the maven file.

I found a TODO here.

I also tried multiple versions btw. (2.6.x, 2.7.0 and 2.7.4)

SemmelJochen avatar Jan 31 '23 08:01 SemmelJochen

Vote +1 from my side

r4fterman avatar Jun 12 '23 18:06 r4fterman

I second this request. This would be extremely helpful for quarkus extensions, since quarkus exntensions follow a certain setup with three modules per extension, and one module is only executed at buildtime. It would be awesome if we were able to exclude that one module when using the makeBom goal.

turing85 avatar Sep 18 '23 17:09 turing85