Merge branch '3.3.x'

Closes gh-42629
This commit is contained in:
Moritz Halbritter
2024-10-14 11:59:26 +02:00
4 changed files with 45 additions and 26 deletions

View File

@@ -92,3 +92,12 @@ When the {url-native-build-tools-docs-gradle-plugin}[GraalVM Native Image plugin
. Configures the `bootJar` task to add the `Spring-Boot-Native-Processed: true` manifest entry.
[[reacting-to-other-plugins.cyclonedx]]
== Reacting to the CycloneDX Plugin
When the {url-cyclonedx-docs-gradle-plugin}[CycloneDX plugin] is applied to a project, the Spring Boot plugin:
. Configures the `cyclonedxBom` task to use the `application` project type and output the SBOM to the `application.cdx` file in JSON format without full license texts.
. Adds the SBOM under `META-INF/sbom` in the generated jar or war file.
. Adds the `Sbom-Format` and `Sbom-Location` to the manifest of the jar or war file.