Skip to content

Align cpp module coordinates and wire C++ aggregator into scanner manager#411

Open
Divyateja2709 wants to merge 18 commits into
cbomkit:mainfrom
Divyateja2709:feature-security-fix
Open

Align cpp module coordinates and wire C++ aggregator into scanner manager#411
Divyateja2709 wants to merge 18 commits into
cbomkit:mainfrom
Divyateja2709:feature-security-fix

Conversation

@Divyateja2709
Copy link
Copy Markdown

Summary

  • Align C++ module Maven coordinates by updating cpp/pom.xml parent version and artifactId.
  • Add CppAggregator to store/reset C/C++ detected nodes consistently with other language modules.
  • Integrate C++ aggregator into ScannerManager aggregation and reset flow.

Test plan

  • Run mvn -pl cpp,sonar-cryptography-plugin -am -DskipTests package
  • Verify no regressions in scanner manager aggregation behavior

Divyateja2709 and others added 18 commits May 6, 2026 07:40
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
Signed-off-by: Divyateja Indrakanti <indrakantidivyateja@gmail.com>
This keeps C/C++ integration consistent by matching artifact/version wiring and ensuring C++ detected nodes participate in global output aggregation and reset lifecycle.

Co-authored-by: Cursor <cursoragent@cursor.com>
@Divyateja2709 Divyateja2709 requested a review from a team as a code owner May 10, 2026 11:12
@san-zrl
Copy link
Copy Markdown
Contributor

san-zrl commented May 20, 2026

Hi @Divyateja2709,

Thank you for your PR and for the time and effort you put into contributing to CBOMkit—we truly appreciate your interest.

You may have noticed that we are already working on adding C/C++ support to sonar-cryptography in PR #377. This approach differs from yours, as it relies on Sonar’s native C/C++ support package rather than ANTLR, similar to how the existing Java module is implemented.

Work on PR #377 is already quite advanced, and at this stage we are leaning toward this approach because we expect it to provide stronger support for cross-file symbol tracing through the Sonar infrastructure.

That said, we will keep your PR open for now until a final decision is made.

@Divyateja2709
Copy link
Copy Markdown
Author

Hi @san-zrl sir,

Thank you for the clarification and for keeping the PR open.

I actually made these PRs as part of my contributions for the Linux Foundation Mentorship program. I explored this ANTLR-based approach and worked on multiple related PRs around it.

Could you please confirm if the mentorship/project is still open for contributors or mentees to continue working on it?

Thank you once again.

@san-zrl
Copy link
Copy Markdown
Contributor

san-zrl commented May 20, 2026

Hi @Divyateja2709,

I actually made these PRs as part of my contributions for the Linux Foundation Mentorship program.

I suspected that. We are still in the application phase for the mentorship program which is open until May 22. After that the mentee will be selected from the applications we received.

Independently of the mentorship program we always welcome contributions (bugs, fixes, new features).

@Divyateja2709
Copy link
Copy Markdown
Author

Hi @san-zrl sir,

Thank you for the update.

I’ve already submitted my resume and cover letter for the mentorship program. I’m currently pursuing a Bachelor’s in Computer Science with a minor in Cybersecurity and was previously a Cybersecurity Intern at Deloitte. I’ve also worked on a small post-quantum cryptography project, so I’m really excited about this opportunity.

Would you recommend that I go through PR #377 and try contributing in that direction? Also, are there any particular areas where I can prepare better or contribute more effectively?

Thank you once again.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants