Only create SBOM for Oracle GraalVM

Author: rudsberg

native-maven-plugin/src/main/java/org/graalvm/buildtools/maven/AbstractNativeImageMojo.java

@@ -87,6 +87,7 @@ public abstract class AbstractNativeImageMojo extends AbstractNativeMojo {
     protected static final String NATIVE_IMAGE_META_INF = "META-INF/native-image";
     protected static final String NATIVE_IMAGE_PROPERTIES_FILENAME = "native-image.properties";
     protected static final String NATIVE_IMAGE_DRY_RUN = "nativeDryRun";
+    private String nativeImageVersionInformation = null;
 
     @Parameter(defaultValue = "${plugin}", readonly = true) // Maven 3 only
     protected PluginDescriptor plugin;
@@ -437,6 +438,21 @@ protected void checkRequiredVersionIfNeeded() throws MojoExecutionException {
         if (requiredVersion == null) {
             return;
         }
+        NativeImageUtils.checkVersion(requiredVersion, getVersionInformation());
+    }
+
+    protected boolean isOracleGraalVM() throws MojoExecutionException {
+        return getVersionInformation().contains("Oracle GraalVM");
+    }
+
+    /**
+     * Returns the output of calling "native-image --version".
+     */
+    protected String getVersionInformation() throws MojoExecutionException {
+        if (nativeImageVersionInformation != null) {
+            return nativeImageVersionInformation;
+        }
+
         Path nativeImageExecutable = NativeImageConfigurationUtils.getNativeImage(logger);
         try {
             ProcessBuilder processBuilder = new ProcessBuilder(nativeImageExecutable.toString());
@@ -447,12 +463,11 @@ protected void checkRequiredVersionIfNeeded() throws MojoExecutionException {
                 throw new MojoExecutionException("Execution of " + commandString + " returned non-zero result");
             }
             InputStream inputStream = versionCheckProcess.getInputStream();
-            String versionToCheck = new BufferedReader(
+            nativeImageVersionInformation = new BufferedReader(
                     new InputStreamReader(inputStream, StandardCharsets.UTF_8))
                     .lines()
                     .collect(Collectors.joining("\n"));
-            NativeImageUtils.checkVersion(requiredVersion, versionToCheck);
-
+            return nativeImageVersionInformation;
         } catch (IOException | InterruptedException e) {
             throw new MojoExecutionException("Checking GraalVM version with " + nativeImageExecutable + " failed", e);
         }

native-maven-plugin/src/main/java/org/graalvm/buildtools/maven/NativeCompileNoForkMojo.java

@@ -106,7 +106,7 @@ public void execute() throws MojoExecutionException {
         maybeSetMainClassFromPlugin(this::consumeConfigurationNodeValue, "org.apache.maven.plugins:maven-jar-plugin", "archive", "manifest", "mainClass");
         maybeAddGeneratedResourcesConfig(buildArgs);
 
-        if (enableSBOM) {
+        if (isOracleGraalVM() && enableSBOM) {
             var generator = new SBOMGenerator(mavenProject, mavenSession, pluginManager, repositorySystem, mainClass, logger);
             generator.generate();
         }

native-maven-plugin/src/main/java/org/graalvm/buildtools/maven/sbom/SBOMGenerator.java

@@ -68,8 +68,9 @@
  * <p>
  * Approach:
  * 1. The cyclonedx-maven-plugin creates a baseline SBOM.
- * 2. The components of the baseline SBOM are updated with additional metadata, most importantly being the set of package
- * names associated with the component (see {@link AddedComponentFields} for all additional metadata).
+ * 2. The components of the baseline SBOM (referred to as the "base" SBOM) are updated with additional metadata,
+ * most importantly being the set of package names associated with the component (see {@link AddedComponentFields}
+ * for all additional metadata).
  * 3. The SBOM is stored at a known location.
  * 4. Native Image processes the SBOM and removes unreachable components and unnecessary dependencies.
  * <p>
@@ -89,7 +90,7 @@ final public class SBOMGenerator {
     private final Logger logger;
 
     private static final String cycloneDXPluginName = "cyclonedx-maven-plugin";
-    private static final String SBOM_NAME = "WIP_SBOM";
+    private static final String SBOM_NAME = "base_sbom";
     private static final String FILE_FORMAT = "json";
 
     private static final class AddedComponentFields {