[{"_1":2,"_162":-5,"_163":-5},"loaderData",{"_3":4,"_18":19,"_25":26,"_141":142},"root",{"_5":-5,"_6":-7,"_7":8,"_9":-7,"_10":11,"_12":-7,"_13":14,"_15":16,"_17":11},"currentUser","primaryEmail","siteVerification","6LeIxAcTAAAAAJcZVRqyHh71UMIEGNQ_MXjiZKhI","toast","enableDev",false,"incidentStatus","theme","system","contrast","normal","dockerRebrandTour","routes/_layout",{"_20":-5,"_21":22,"_23":11,"_24":22},"username","isAskGordonEnabled",true,"showMinimalLanding","showHoneypotTrap","routes/_layout.r.$namespace.$reponame",{"_27":28,"_29":-5,"_30":11,"_31":11,"_32":33,"_34":35,"_36":-5,"_37":11,"_38":39,"_88":-5,"_89":90,"_129":-5,"_130":11,"_131":22,"_132":11,"_133":11,"_134":-5,"_135":11,"_136":-5,"_137":138,"_139":91,"_140":-7},"canonicalUrl","https://hub.docker.com/r/agilesolutions/bomverifier/tags","mcpServer","canSeeDockerfile","canSeeAutobuilds","namespace","agilesolutions","reponame","bomverifier","cloudBuildSource","isAutobuildsAvailable","repo",{"_40":41,"_42":43,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":55,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":74,"_79":11,"_80":81,"_85":33,"_86":87},"categories",[],"content_types",[44],"image","date_registered","2019-09-07T15:04:08.806948Z","description","Scan Springboot included libraries against a BOM Bill of Material. ","is_private","last_updated","2019-09-14T12:55:38.577337Z","last_modified","2024-10-16T13:48:34.145251Z","media_types",[56],"application/vnd.docker.container.image.v1+json","name","pull_count",340,"repository_type","star_count",0,"status",1,"status_description","active","source","collaborator_count","full_description","Scan Spring boot jar file for libraries to be matching with the the content of bom.yaml. This bom verifier container is designed to be configured on a Jenkins 2.0 pipeline as docker agent to be run as part of the library verification stage of any pipeline that needs to verify spring boot apps for libraries that are approved by your organization.\nThis will let the jenkins build fail if any of the included libraries on that spring boot app are appearing on the BOM Bill of Material designed by your company. That BOM lists all libraries that are allowed to run in your organization, like apache commons http components. This BOM presents a baseline of libraries and versions that have been proven to be working together.\nWhat is Maven BOM?\nBOM stands for Bill Of Materials. A BOM is a special kind of POM that is used to control the versions of a project’s dependencies and provide a central place to define and update those versions.\n\nBOM provides the flexibility to add a dependency to our module without worrying about the version that we should depend on.\n\nTransitive Dependencies\nMaven can discover the libraries that are needed by our own dependencies in our pom.xml and includes them automatically. There's no limit to the number of dependency levels that the libraries are gathered from.\n\nThe conflict here comes when 2 dependencies refer to different versions of a specific artifact. Which one will be included by Maven?\n\nDependency Management\nSimply put, Dependency Management is a mechanism to centralize the dependency information.\n\nSpring BOM\nWe may find that a third-party library, or another Spring project, pulls in a transitive dependency to an older release. If we forget to explicitly declare a direct dependency, unexpected issues can arise.\n\nTo overcome such problems, Maven supports the concept of BOM dependency.\n\nWe can import the spring-framework-bom in our dependencyManagement section to ensure that all Spring dependencies are at the same version:\n\n \n \n org.springframework\n spring-framework-bom\n 4.3.8.RELEASE\n pom\n import\n \n \n\nWe don't need to specify the version attribute when we use the Spring artifacts as in the following example:\n\nWhen we have a set of projects that inherit a common parent, we can put all dependency information in a shared POM file called BOM.\n\nMore about the Spring boot BOM you can find here https://github.com/spring-projects/spring-boot/blob/master/spring-boot-project/spring-boot-dependencies/pom.xml","has_starred","hub_user","immutable_tags_settings",{"_75":11,"_76":77},"enabled","rules",[78],".*","is_automated","permissions",{"_82":22,"_83":11,"_84":11},"read","write","admin","user","storage_size",674469554,"orgData","recentTags",[91],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":100,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":22},"content_type","creator",403712,"full_size",316114300,"id",68232845,"images",[101],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},"architecture","amd64","digest","sha256:122195f0e20181200561a210aa0888056e563b6ba7c8023b0633fb1fc24be9fd","features","","last_pulled","2026-10-29T06:58:36.865429912Z","last_pushed","2019-09-14T12:55:39Z","os","linux","os_features","os_version","size","variant","2019-09-14T12:55:38.233235Z","last_updater","last_updater_username","media_type","latest","repository",7665660,"tag_last_pulled","tag_last_pushed","tag_status","v2","sbxKitMetadata","isPotentialSpam","isHubSbxKitsEnabled","showSbxRunInCloud","showSbxLogoOverride","sbxTrademarkText","displaySecurityMetadata","tagAttestations","tagsHaveAttestations",[],"selectedTag","attestationsUrl","routes/_layout.r.$namespace.$reponame.tags",{"_38":143,"_150":151,"_137":160,"_161":11},{"_40":144,"_42":145,"_45":46,"_47":48,"_49":11,"_50":51,"_52":53,"_54":146,"_57":35,"_32":33,"_58":59,"_60":44,"_61":62,"_63":64,"_65":66,"_67":-5,"_68":62,"_69":70,"_71":11,"_72":33,"_73":147,"_79":11,"_80":149,"_85":33,"_86":87},[],[44],[56],{"_75":11,"_76":148},[78],{"_82":22,"_83":11,"_84":11},"tags",{"_152":64,"_153":-5,"_154":-5,"_155":156},"count","next","previous","results",[157],{"_92":44,"_93":94,"_95":96,"_97":98,"_99":158,"_50":118,"_119":94,"_120":33,"_121":56,"_57":122,"_123":124,"_125":109,"_126":118,"_127":66,"_128":22},[159],{"_102":103,"_104":105,"_106":107,"_108":109,"_110":111,"_112":113,"_114":107,"_115":-5,"_116":96,"_63":66,"_117":-5},[],"canDeleteTags","actionData","errors"]

agilesolutions/bomverifier

Tags for agilesolutions/bomverifier