Implement and document SBOM support (apache/logging-log4j2#1707)

README.adoc

@@ -42,6 +42,11 @@ In accordance with the Apache Software Foundation's release https://infra.apache
 
 See xref:RELEASING.adoc[release instructions] for further details.
 
+=== CycloneDX Software Bill of Materials (SBOM)
+
+Starting with version `2.22.0`, this project distributes https://cyclonedx.org/capabilities/sbom/[CyclenoDX Software Bill of Materials (SBOM)] along with each deployed artifact.
+This is streamlined by `logging-parent`, see https://logging.apache.org/logging-parent/latest/#cyclonedx-sbom[its website] for details.
+
 == Support
 
 Please keep in mind that this project is intended for internal usage only.

pom.xml

@@ -15,7 +15,7 @@
  ~ See the License for the specific language governing permissions and
  ~ limitations under the License.
  -->
-<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" child.project.url.inherit.append.path="false" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
 
  <modelVersion>4.0.0</modelVersion>
 
@@ -112,7 +112,7 @@
 
  </developers>
 
- <scm>
+ <scm child.scm.connection.inherit.append.path="false" child.scm.developerConnection.inherit.append.path="false" child.scm.url.inherit.append.path="false">
  <connection>scm:git:https://github.com/apache/logging-log4j-jmx-gui.git</connection>
  <developerConnection>scm:git:https://github.com/apache/logging-log4j-jmx-gui.git</developerConnection>
  <tag>HEAD</tag>
@@ -129,16 +129,21 @@
  <url>https://github.com/apache/logging-log4j-jmx-gui/actions</url>
  </ciManagement>
 
+ <distributionManagement>
+ <downloadUrl>${scm.url}</downloadUrl>
+ </distributionManagement>
+
  <properties>
 
  <!-- project version -->
- <revision>2.21.1-SNAPSHOT</revision>
+ <revision>2.22.0-SNAPSHOT</revision>
+
+ <!-- Additional manifest entries -->
+ <Class-Path>log4j-api-2.21.0.jar log4j-core-2.21.0.jar</Class-Path>
 
  <!-- dependency versions -->
  <log4j.version>2.21.0</log4j.version>
 
- <!-- Additional manifest entries -->
- <Class-Path>log4j-api-2.21.0.jar log4j-core-2.21.0.jar</Class-Path>
  </properties>
 
  <dependencies>