Add sbom module: Spring Boot 4.2.0-RC1 tools jar-mode sbom command, CycloneDX in the jar, Actuator endpoint, licence check and OSV scan

Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Cfo2K4u4rF18QsPXPFnytf
This commit is contained in:
2026-10-24 18:12:28 +00:00
co-authored by Claude Sonnet 5.5
parent 8252cba4c5
commit 809272f7dc
23 changed files with 574 additions and 0 deletions
+17
View File
@@ -0,0 +1,17 @@
format CycloneDX 1.6, serial urn:uuid:268f...
lifecycle phase: build
generated by: org.cyclonedx:cyclonedx-maven-plugin 2.9.3
describes: application com.ankurm:sbom:1.0.0
components: 49
by scope: required 49
with a hash: 49 of 49
hash algorithms on the first component: MD5, SHA-1, SHA-256, SHA-512, SHA-384, SHA3-384, SHA3-256, SHA3-512
with a licence: 49 of 49
dependency entries: 50
direct dependencies of the application: 2
org.springframework.boot/[email protected]
org.springframework.boot/[email protected]
first three components:
pkg:maven/org.springframework.boot/[email protected]
pkg:maven/org.springframework.boot/[email protected]
pkg:maven/org.springframework.boot/[email protected]