Add SBOM for gradle plugins

^KTI-1299

libraries/examples/kotlin-gradle-subplugin-example/build.gradle

@@ -35,7 +35,7 @@ dependencies {
     compileOnly project(':dependencies:intellij-core')
 }
 
-GradleCommonKt.configureCommonPublicationSettingsForGradle(project, false)
+GradleCommonKt.configureCommonPublicationSettingsForGradle(project, false, false)
 GradleCommonKt.configureKotlinCompileTasksGradleCompatibility(project)
 GradleCommonKt.excludeGradleCommonDependencies(project, sourceSets.main)
 TasksKt.optInToExperimentalCompilerApi(project)

libraries/tools/kotlin-gradle-plugins-bom/build.gradle.kts

@@ -26,7 +26,7 @@ dependencies {
     }
 }
 
-configureCommonPublicationSettingsForGradle(signLibraryPublication)
+configureCommonPublicationSettingsForGradle(signLibraryPublication, sbom = false)
 
 publishing {
     publications {

repo/gradle-build-conventions/buildsrc-compat/src/main/kotlin/GradleCommon.kt

@@ -65,18 +65,33 @@ val commonSourceSetName = "common"
  */
 fun Project.configureCommonPublicationSettingsForGradle(
     signingRequired: Boolean,
+    sbom: Boolean = true,
 ) {
     plugins.withId("maven-publish") {
-        configureDefaultPublishing(signingRequired)
-
         extensions.configure<PublishingExtension> {
             publications
                 .withType<MavenPublication>()
                 .configureEach {
                     configureKotlinPomAttributes(project)
+                    if (sbom) {
+                        if (name == "pluginMaven") {
+                            val sbomTask = configureSbom(target = "PluginMaven")
+                            artifact("$buildDir/spdx/PluginMaven/PluginMaven.spdx.json") {
+                                extension = "spdx.json"
+                                builtBy(sbomTask)
+                            }
+                        } else if (name == "Main") {
+                            val sbomTask = configureSbom()
+                            artifact("$buildDir/spdx/MainPublication/MainPublication.spdx.json") {
+                                extension = "spdx.json"
+                                builtBy(sbomTask)
+                            }
+                        }
+                    }
                 }
         }
     }
+    configureDefaultPublishing(signingRequired)
 }
 
 /**