Add sbom module: Spring Boot 4.2.0-RC1 tools jar-mode sbom command, CycloneDX in the jar, Actuator endpoint, licence check and OSV scan

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01Cfo2K4u4rF18QsPXPFnytf
2026-10-24 18:12:28 +00:00
parent 8252cba4c5
commit 809272f7dc
23 changed files with 574 additions and 0 deletions
@@ -0,0 +1,6 @@
+GET /actuator              -> links: self, sbom, sbom-id, health, health-path
+GET /actuator/sbom         -> 200 {"ids":["application"]}
+GET /actuator/sbom/application -> 200, content-type application/vnd.cyclonedx+json
+  bomFormat CycloneDX, specVersion 1.6, components 49
+same document as the file the build wrote: true
+GET /actuator/sbom/nope    -> 404