This version is still in development and is not considered stable yet. For the latest stable version, please use Spring Boot 3.4.0!spring-doc.cn

Software Bill of Materials (sbom)

The sbom endpoint provides information about the software bill of materials (SBOM).spring-doc.cn

Retrieving the Available SBOMs

To retrieve the available SBOMs, make a GET request to /actuator/sbom, as shown in the following curl-based example:spring-doc.cn

$ curl 'http://localhost:8080/actuator/sbom' -i -X GET

The resulting response is similar to the following:spring-doc.cn

HTTP/1.1 200 OK
Content-Type: application/vnd.spring-boot.actuator.v3+json
Content-Length: 31

{
  "ids" : [ "application" ]
}

Response Structure

The response contains the available SBOMs. The following table describes the structure of the response:spring-doc.cn

Path Type Description

idsspring-doc.cn

Arrayspring-doc.cn

An array of available SBOM ids.spring-doc.cn

Retrieving a Single SBOM

To retrieve the available SBOMs, make a GET request to /actuator/sbom/{id}, as shown in the following curl-based example:spring-doc.cn

$ curl 'http://localhost:8080/actuator/sbom/application' -i -X GET

The preceding example retrieves the SBOM named application. The resulting response depends on the format of the SBOM. This example uses the CycloneDX format.spring-doc.cn

HTTP/1.1 200 OK
Content-Type: application/vnd.cyclonedx+json
Accept-Ranges: bytes
Content-Length: 160316

{
  "bomFormat" : "CycloneDX",
  "specVersion" : "1.5",
  "serialNumber" : "urn:uuid:13862013-3360-43e5-8055-3645aa43c548",
  "version" : 1,
  // ...
}

Response Structure

The response depends on the format of the SBOM:spring-doc.cn