4.0.0 org.springframework.boot spring-boot-starter-parent 4.2.0-RC1 com.ankurm sbom 1.0.0 sbom Spring Boot SBOMs: the 4.2 tools jar-mode command, CycloneDX, Actuator and scanning 25 org.springframework.boot spring-boot-starter-webmvc org.springframework.boot spring-boot-starter-actuator org.springframework.boot spring-boot-starter-test test vulnerable org.apache.logging.log4j log4j-core 2.14.1 org.springframework.boot spring-boot-maven-plugin org.cyclonedx cyclonedx-maven-plugin 2.9.3 generate-resources makeAggregateBom json application.cdx ${project.build.outputDirectory}/META-INF/sbom application