BLUE
Profile banner
TV
Thomas Vitale
@thomasvitale.com
Software Engineer 📚 Author of “Cloud Native Spring in Action” 🛳️ CNCF Ambassador 🎙️ International Speaker 👨‍💻 Open Source. I write about Java, Cloud Native, Kubernetes, Security, Continuous Delivery, and Platform Engineering.
106 followers83 following52 posts
TVthomasvitale.com

Spring Boot 3.3 can detect the OWASP CycloneDX Gradle/Maven plugin and automatically use it to generate an SBOM when you build the Java application. It will export the SBOM as a JSON file, and serve it via a dedicated Actuator endpoint. #SpringBoot#SBOM#OWASP

SBOMs in Spring Boot 3.3. Add the CycloneDX plugin to your build.gradle file. Then, you'll get out-of-the-box SBOM via Actuator Endpoint and JSON File.
0

Profile banner
TV
Thomas Vitale
@thomasvitale.com
Software Engineer 📚 Author of “Cloud Native Spring in Action” 🛳️ CNCF Ambassador 🎙️ International Speaker 👨‍💻 Open Source. I write about Java, Cloud Native, Kubernetes, Security, Continuous Delivery, and Platform Engineering.
106 followers83 following52 posts