4.0.0 org.spdx cdx2spdx 0.1.4 jar cdx2spdx https://github.com/spdx/cdx2spdx The Apache Software License, Version 2.0 http://www.apache.org/licenses/LICENSE-2.0.txt repo goneall Gary O'Neall gary@sourceauditor.com SPDX http://spdx.org SPDX http://spdx.org https://github.com/spdx/cdx2spdx https://github.com/spdx/cdx2spdx.git https://github.com/spdx/cdx2spdx.git Github https://github.com/spdx/cdx2spdx/issues Command line utility to convert CycloneDX SBOM files to SPDX Documents Github Actions https://github.com/spdx/cdx2spdx/actions ossrh spdx-spdx-tools https://oss.sonatype.org/service/local/staging/deploy/maven2/ UTF-8 https://sonarcloud.io spdx cdx2spdx 7.2.1 doclint-java8-disable [1.8,) -Xdoclint:none gpg-signing org.apache.maven.plugins maven-gpg-plugin 1.6 sign-artifacts verify sign ${gpg.keyname} ${gpg.keyname} junit junit 4.11 test org.spdx java-spdx-library 1.1.5 com.fasterxml.jackson.core jackson-databind 2.14.0-rc1 org.cyclonedx cyclonedx-core-java 7.3.2 org.spdx spdx-rdf-store 1.1.5 org.spdx spdx-jackson-store 1.1.5 org.spdx spdx-tagvalue-store 1.1.5 org.spdx spdx-spreadsheet-store 1.1.5 resources false resources **/* META-INF false . LICENSE src/main **/*.java src/test **/*.java src/test/resources org.owasp dependency-check-maven ${dependency-check-maven.version} dependency-check-supress.xml org.apache.maven.plugins maven-compiler-plugin 3.8.0 11 ${project.build.sourceEncoding} true true true maven-assembly-plugin org.spdx.cdx2spdx.CycloneToSpdx jar-with-dependencies make-assembly package single org.apache.maven.plugins maven-javadoc-plugin 2.9 true 8 ${env.JAVA_HOME}/bin/javadoc -Xdoclint:none attach-javadocs ${javadoc.opts} jar org.apache.maven.plugins maven-source-plugin 3.2.1 attach-sources verify jar-no-fork org.spdx spdx-maven-plugin 0.6.4 build-spdx prepare-package createSPDX http://spdx.org/spdxdocs/cdx2spdx-${version} Copyright (c) 2022 Source Auditor Inc. Gary O'Neall Apache-2.0 Apache-2.0 Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License. Apache-2.0 Apache-2.0 Person: Gary O'Neall Organization: Source Auditor Inc.