asmhatre/spring-boot-demo
1
0
Fork 0
Code Activity

Add sbom module: Spring Boot 4.2.0-RC1 tools jar-mode sbom command, CycloneDX in the jar, Actuator endpoint, licence check and OSV scan

Browse Source 
Co-Authored-By: Claude Sonnet 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Cfo2K4u4rF18QsPXPFnytf
This commit is contained in:
asmhatre
2026-10-24 18:12:28 +00:00
co-authored by Claude Sonnet 5.5
parent 8252cba4c5
commit 809272f7dc
23 changed files with 574 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
sbom/output/07-sbom-against-jar.txt
+14
View File
@@ -0,0 +1,14 @@
components in the SBOM: 49
jars in BOOT-INF/lib: 42
in both: 41
in the SBOM but not in the jar:
spring-boot-starter-4.2.0-RC1.jar
spring-boot-starter-actuator-4.2.0-RC1.jar
spring-boot-starter-jackson-4.2.0-RC1.jar
spring-boot-starter-logging-4.2.0-RC1.jar
spring-boot-starter-micrometer-metrics-4.2.0-RC1.jar
spring-boot-starter-tomcat-4.2.0-RC1.jar
spring-boot-starter-tomcat-runtime-4.2.0-RC1.jar
spring-boot-starter-webmvc-4.2.0-RC1.jar
in the jar but not in the SBOM:
spring-boot-jarmode-tools-4.2.0-RC1.jar