sbt-bom icon indicating copy to clipboard operation
sbt-bom copied to clipboard
verified publisher icon siculo

sbt-assembly integration

Open raboof opened this issue 1 year ago • 1 comments

It would be really great if sbt-bom could integrate with sbt-assembly, so it'd accurately describe libraries included (or even shaded) into the artifact.

Currently the Maven CycloneDX plugin does not have this functionality either. Of course the BOM would have to make it really clear what the difference is between components that are a dependency of this component, and components that are embedded into this component. Likely the 'assembly' concept can be used for this, but AFAICS there are no conventions for this yet.

raboof avatar Feb 20 '24 23:02 raboof

Projects that'd benefit from this include Apache Toree and Apache Pekko gRPC (codegen)

raboof avatar Jan 20 '25 17:01 raboof