Skip to content

CM-59777: Add --maven-settings-file option to report sbom command#388

Closed
niramna wants to merge 1 commit intocycodehq:mainfrom
niramna:CM-59777-maven-settings-sbom
Closed

CM-59777: Add --maven-settings-file option to report sbom command#388
niramna wants to merge 1 commit intocycodehq:mainfrom
niramna:CM-59777-maven-settings-sbom

Conversation

@niramna
Copy link

@niramna niramna commented Feb 17, 2026

Summary

  • Adds --maven-settings-file option to the report sbom command, bringing it to parity with the scan command
  • The shared Maven resolver (restore_maven_dependencies.py) already reads ctx.obj.get('maven_settings_file') and passes -s <path> to mvn — the only missing piece was accepting and storing the flag in sbom_command.py
  • Without this fix, users with private/enterprise Maven repositories would silently get incomplete dependency graphs when generating SBOMs via report sbom path

Test plan

  • Run cycode report sbom path --maven-settings-file /path/to/settings.xml . against a Maven project that requires a custom settings.xml and verify the dependency tree resolves correctly
  • Run without --maven-settings-file and verify existing behavior is unchanged
  • Verify cycode report sbom --help shows the new option

Jira: CM-59777

🤖 Generated with Claude Code

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@niramna
Copy link
Author

niramna commented Feb 17, 2026

I see it's a duplicate of #385 so i'm closing this one

@niramna niramna closed this Feb 17, 2026
@niramna niramna deleted the CM-59777-maven-settings-sbom branch February 17, 2026 20:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

Comments