Skip to content

[Not Ready for Review] GEODE-10481: Implement Plugin Foundation & Compatibility Validation#7938

Closed
sboorlagadda wants to merge 1 commit into
developfrom
feature/GEODE-10481-Phase1-PR1
Closed

[Not Ready for Review] GEODE-10481: Implement Plugin Foundation & Compatibility Validation#7938
sboorlagadda wants to merge 1 commit into
developfrom
feature/GEODE-10481-Phase1-PR1

Conversation

@sboorlagadda

Copy link
Copy Markdown
Member

This commit implements the foundation for SBOM generation in Apache Geode
as part of the GEODE-10481 initiative. This is PR 1 of 15 in the planned
implementation sequence.

   Changes:
   - Add CycloneDX BOM plugin v1.8.2 to root build.gradle (apply false)
   - Implement validateGradleCompatibility task for version validation
   - Add comprehensive SBOM configuration structure (disabled by default)
   - Create test framework with Gradle TestKit integration
   - Add automated validation script for CI/testing
   Key Features:
   - Zero impact on existing builds (plugin not applied)
   - Validates Gradle 7.3.3+ and Java 8+ compatibility
   - Future-ready for Gradle 8.5+ and Java 21+
   - Comprehensive test coverage with SbomCompatibilityTest and SbomPluginIntegrationTest
   - Complete documentation in SBOM-PR1-README.md
   Safety:
   - All SBOM functionality disabled (sbomEnabled = false)
   - No functional changes to existing build processes
   - Easy rollback capability
   - Performance impact < 3 seconds
   This establishes the foundation for subsequent PRs:
   - PR 2: Context Detection & Environment Analysis
   - PR 3: Basic SBOM Generation
   - PRs 4-15: Advanced features and enterprise integration
   Tested: All tests pass, no regressions detected
   Documentation: Complete implementation guide included (and want to also maintain a log in `proposal/GEODE-10481/pr-log`

For all changes, please confirm:

  • Is there a JIRA ticket associated with this PR? Is it referenced in the commit message?
  • Has your PR been rebased against the latest commit within the target branch (typically develop)?
  • Is your initial contribution a single, squashed commit?
  • Does gradlew build run cleanly?
  • Have you written or updated unit tests to verify your changes?
  • If adding new dependencies to the code, are these dependencies licensed in a way that is compatible for inclusion under ASF 2.0?

…PR 1/15)

   This commit implements the foundation for SBOM generation in Apache Geode
   as part of the GEODE-10481 initiative. This is PR 1 of 15 in the planned
   implementation sequence.
   Changes:
   - Add CycloneDX BOM plugin v1.8.2 to root build.gradle (apply false)
   - Implement validateGradleCompatibility task for version validation
   - Add comprehensive SBOM configuration structure (disabled by default)
   - Create test framework with Gradle TestKit integration
   - Add automated validation script for CI/testing
   Key Features:
   - Zero impact on existing builds (plugin not applied)
   - Validates Gradle 7.3.3+ and Java 8+ compatibility
   - Future-ready for Gradle 8.5+ and Java 21+
   - Comprehensive test coverage with SbomCompatibilityTest and SbomPluginIntegrationTest
   - Complete documentation in SBOM-PR1-README.md
   Safety:
   - All SBOM functionality disabled (sbomEnabled = false)
   - No functional changes to existing build processes
   - Easy rollback capability
   - Performance impact < 3 seconds
   This establishes the foundation for subsequent PRs:
   - PR 2: Context Detection & Environment Analysis
   - PR 3: Basic SBOM Generation
   - PRs 4-15: Advanced features and enterprise integration
   Tested: All tests pass, no regressions detected
   Documentation: Complete implementation guide included
@sboorlagadda sboorlagadda requested review from JinwooHwang and raboof and removed request for JinwooHwang and raboof September 30, 2025 23:52
@sboorlagadda sboorlagadda changed the title GEODE-10481: Implement Plugin Foundation & Compatibility Validation [Not Ready for Review] GEODE-10481: Implement Plugin Foundation & Compatibility Validation Oct 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant