You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
It would be really great if sbt-bom could integrate with sbt-assembly, so it'd accurately describe libraries included (or even shaded) into the artifact.
Currently the Maven CycloneDX plugin does not have this functionality either. Of course the BOM would have to make it really clear what the difference is between components that are a dependency of this component, and components that are embedded into this component. Likely the 'assembly' concept can be used for this, but AFAICS there are no conventions for this yet.
The text was updated successfully, but these errors were encountered:
It would be really great if sbt-bom could integrate with sbt-assembly, so it'd accurately describe libraries included (or even shaded) into the artifact.
Currently the Maven CycloneDX plugin does not have this functionality either. Of course the BOM would have to make it really clear what the difference is between components that are a dependency of this component, and components that are embedded into this component. Likely the 'assembly' concept can be used for this, but AFAICS there are no conventions for this yet.
The text was updated successfully, but these errors were encountered: