Features
Logging Parent aims to deliver the following features.
Parent POM
The provided parent POM features the following conveniences:
-
apache-rat-pluginintegration for license preamble verification -
log4j-changelog-maven-pluginintegration for changelog and release note management -
maven-enforcer-pluginchecks -
spotless-maven-pluginintegration for code formatting -
jacoco-maven-pluginintegration for test coverage analysis (optionalcoverageprofile) -
bnd-maven-pluginintegration for auto-generating OSGi and JPMS descriptors -
cyclonedx-maven-plugin integration for auto-generating Software Bill of Materials (SBOM)
-
Antora-based site generation
CycloneDX Software Bill of Materials (SBOM)
Logging Parent streamlines the generation of CycloneDX Software Bill of Materials (SBOM) using cyclonedx-maven-plugin.
Plugin execution is configured and activated to generate SBOM files for each module, including the root one.
Generated SBOM files are attached as artifacts with cyclonedx classifier and XML extensions, that is, <artifactId>-<version>-cyclonedx.xml.
Produced SBOMs are enriched with vulnerability-assertion references to a CycloneDX Vulnerability Disclosure Report (VDR) that Apache Logging Services uses for all projects it maintains.
This VDR is accessible through the following URL: https://logging.apache.org/cyclonedx/vdr.xml
Reusable GitHub Actions workflows
Logging Parent publishes several reusable workflows that can be used from other repositories.
See Reusable GitHub Actions workflows for details.