Disable dependency verification during each task when resolving as pa…

…rt of SBOM generation.

Signed-off-by: Kenneth J. Shackleton <[email protected]>

src/main/java/org/cyclonedx/gradle/CycloneDxTask.java

@@ -547,6 +547,7 @@ private Map<String, org.cyclonedx.model.Dependency> buildDependencyGraph(
         }
         final Dependency pomDep = getProject().getDependencies().create(dependencyName + "@pom");
         final Configuration pomCfg = getProject().getConfigurations().detachedConfiguration(pomDep);
+        pomCfg.getResolutionStrategy().disableDependencyVerification();
 
         try {
             @Nullable final File pomFile = pomCfg.resolve().stream().findFirst().orElse(null);

src/main/java/org/cyclonedx/gradle/GradleAssistedMavenModelResolverImpl.java

@@ -45,6 +45,7 @@ public ModelSource2 resolveModel(String groupId, String artifactId, String versi
         org.gradle.api.artifacts.Dependency dependency =
                 project.getDependencies().create(depNotation);
         Configuration config = project.getConfigurations().detachedConfiguration(dependency);
+        config.getResolutionStrategy().disableDependencyVerification();
 
         File pomXml = config.getSingleFile();
         return new ModelSource2() {