Add SBOM jsf signing to openjdk_build_pipeline.groovy

pipelines/build/common/openjdk_build_pipeline.groovy

@@ -1054,6 +1054,49 @@ class Build {
             }
         }
     }
+
+    // Kick off the sign_temurin_jsf job to sign the SBOM
+    private void jsfSignSBOM() {
+        context.stage('SBOM Sign') {
+
+            context.println "Running build_sign_sbom_libraries to build the SBOM libraries"
+            def buildSBOMLibrariesJob = context.build job: 'build_sign_sbom_libraries',
+                propagate: true
+
+            def paramsJsf = [
+                  context.string(name: 'UPSTREAM_JOB_NUMBER', value: "${env.BUILD_NUMBER}"),
+                  context.string(name: 'UPSTREAM_JOB_NAME', value: "${env.JOB_NAME}"),
+                  context.string(name: 'UPSTREAM_DIR', value: 'workspace/target'),
+                  context.string(name: 'SBOM_LIBRARY_JOB_NUMBER', value: "${buildSBOMLibrariesJob.getNumber()}")
+           ]
+
+            context.println "RUNNING sign_temurin_jsf for ${buildConfig.TARGET_OS}/${buildConfig.ARCHITECTURE} ..."
+            def signSBOMJob = context.build job: 'build-scripts/release/sign_temurin_jsf',
+               propagate: true,
+               parameters: paramsJsf
+
+            context.node('worker') {
+                // Remove any previous workspace artifacts
+                context.sh 'rm -rf workspace/target/* || true'
+                context.copyArtifacts(
+                    projectName: 'build-scripts/release/sign_temurin_jsf',
+                    selector: context.specific("${signSBOMJob.getNumber()}"),
+                    filter: '**/*sbom*.json',
+                    fingerprintArtifacts: true,
+                    target: 'workspace/target/',
+                    flatten: true)
+
+                // Archive SBOM signatures in Jenkins
+                try {
+                    context.timeout(time: buildTimeouts.ARCHIVE_ARTIFACTS_TIMEOUT, unit: 'HOURS') {
+                        context.archiveArtifacts artifacts: 'workspace/target/*sbom*.json'
+                    }
+               } catch (FlowInterruptedException e) {
+                    throw new Exception("[ERROR] Archive artifact timeout (${buildTimeouts.ARCHIVE_ARTIFACTS_TIMEOUT} HOURS) for ${downstreamJobName} has been reached. Exiting...")
+                }
+            }
+        }
+    }
     /*
     Lists and returns any compressed archived or sbom file contents of the top directory of the build node
     */
@@ -2208,6 +2251,7 @@ class Build {
                 if (!env.JOB_NAME.contains('pr-tester') && context.JENKINS_URL.contains('adopt')) {
                     try {
                         gpgSign()
+                        jsfSignSBOM()
                     } catch (Exception e) {
                         context.println(e.message)
                         currentBuild.result = 'FAILURE'