| Composant |
Version |
Source |
sbom_sources_trivy.json |
sbom_sources_syft.json |
sbom_jar_trivy.json |
sbom_jar_syft.json |
sbom_docker_trivy.json |
sbom_docker_syft.json |
| pom.xml |
|
|
|
|
|
|
|
|
| debian |
11.4 |
|
|
|
|
|
|
|
| debian |
11 |
|
|
|
|
|
|
|
| adduser |
3.118 |
deb |
|
|
|
|
|
|
| apt |
2.2.4 |
deb |
|
|
|
|
|
|
| base-files |
11.1+deb11u4 |
deb |
|
|
|
|
|
|
| base-passwd |
3.5.51 |
deb |
|
|
|
|
|
|
| bash |
5.1-2+deb11u1 |
deb |
|
|
|
|
|
|
| bsdutils |
1:2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| ca-certificates |
20210119 |
deb |
|
|
|
|
|
|
| coreutils |
8.32-4+b1 |
deb |
|
|
|
|
|
|
| dash |
0.5.11+git20200708+dd9ef66-5 |
deb |
|
|
|
|
|
|
| debconf |
1.5.77 |
deb |
|
|
|
|
|
|
| debian-archive-keyring |
2021.1.1 |
deb |
|
|
|
|
|
|
| debianutils |
4.11.2 |
deb |
|
|
|
|
|
|
| diffutils |
1:3.7-5 |
deb |
|
|
|
|
|
|
| dpkg |
1.20.11 |
deb |
|
|
|
|
|
|
| e2fsprogs |
1.46.2-2 |
deb |
|
|
|
|
|
|
| findutils |
4.8.0-1 |
deb |
|
|
|
|
|
|
| gcc-10-base |
10.2.1-6 |
deb |
|
|
|
|
|
|
| gcc-9-base |
9.3.0-22 |
deb |
|
|
|
|
|
|
| gpgv |
2.2.27-2+deb11u2 |
deb |
|
|
|
|
|
|
| grep |
3.6-1 |
deb |
|
|
|
|
|
|
| gzip |
1.10-4+deb11u1 |
deb |
|
|
|
|
|
|
| hostname |
3.23 |
deb |
|
|
|
|
|
|
| init-system-helpers |
1.60 |
deb |
|
|
|
|
|
|
| libacl1 |
2.2.53-10 |
deb |
|
|
|
|
|
|
| libapt-pkg6.0 |
2.2.4 |
deb |
|
|
|
|
|
|
| libattr1 |
1:2.4.48-6 |
deb |
|
|
|
|
|
|
| libaudit-common |
1:3.0-2 |
deb |
|
|
|
|
|
|
| libaudit1 |
1:3.0-2 |
deb |
|
|
|
|
|
|
| libblkid1 |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| libbz2-1.0 |
1.0.8-4 |
deb |
|
|
|
|
|
|
| libc-bin |
2.31-13+deb11u3 |
deb |
|
|
|
|
|
|
| libc6 |
2.31-13+deb11u3 |
deb |
|
|
|
|
|
|
| libcap-ng0 |
0.7.9-2.2+b1 |
deb |
|
|
|
|
|
|
| libcom-err2 |
1.46.2-2 |
deb |
|
|
|
|
|
|
| libcrypt1 |
1:4.4.18-4 |
deb |
|
|
|
|
|
|
| libdb5.3 |
5.3.28+dfsg1-0.8 |
deb |
|
|
|
|
|
|
| libdebconfclient0 |
0.260 |
deb |
|
|
|
|
|
|
| libext2fs2 |
1.46.2-2 |
deb |
|
|
|
|
|
|
| libffi7 |
3.3-6 |
deb |
|
|
|
|
|
|
| libgcc-s1 |
10.2.1-6 |
deb |
|
|
|
|
|
|
| libgcrypt20 |
1.8.7-6 |
deb |
|
|
|
|
|
|
| libgmp10 |
2:6.2.1+dfsg-1+deb11u1 |
deb |
|
|
|
|
|
|
| libgnutls30 |
3.7.1-5+deb11u1 |
deb |
|
|
|
|
|
|
| libgpg-error0 |
1.38-2 |
deb |
|
|
|
|
|
|
| libgssapi-krb5-2 |
1.18.3-6+deb11u1 |
deb |
|
|
|
|
|
|
| libhogweed6 |
3.7.3-1 |
deb |
|
|
|
|
|
|
| libidn2-0 |
2.3.0-5 |
deb |
|
|
|
|
|
|
| libk5crypto3 |
1.18.3-6+deb11u1 |
deb |
|
|
|
|
|
|
| libkeyutils1 |
1.6.1-2 |
deb |
|
|
|
|
|
|
| libkrb5-3 |
1.18.3-6+deb11u1 |
deb |
|
|
|
|
|
|
| libkrb5support0 |
1.18.3-6+deb11u1 |
deb |
|
|
|
|
|
|
| liblz4-1 |
1.9.3-2 |
deb |
|
|
|
|
|
|
| liblzma5 |
5.2.5-2.1~deb11u1 |
deb |
|
|
|
|
|
|
| libmount1 |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| libnettle8 |
3.7.3-1 |
deb |
|
|
|
|
|
|
| libnsl2 |
1.3.0-2 |
deb |
|
|
|
|
|
|
| libp11-kit0 |
0.23.22-1 |
deb |
|
|
|
|
|
|
| libpam-modules-bin |
1.4.0-9+deb11u1 |
deb |
|
|
|
|
|
|
| libpam-modules |
1.4.0-9+deb11u1 |
deb |
|
|
|
|
|
|
| libpam-runtime |
1.4.0-9+deb11u1 |
deb |
|
|
|
|
|
|
| libpam0g |
1.4.0-9+deb11u1 |
deb |
|
|
|
|
|
|
| libpcre2-8-0 |
10.36-2 |
deb |
|
|
|
|
|
|
| libpcre3 |
2:8.39-13 |
deb |
|
|
|
|
|
|
| libseccomp2 |
2.5.1-1+deb11u1 |
deb |
|
|
|
|
|
|
| libselinux1 |
3.1-3 |
deb |
|
|
|
|
|
|
| libsemanage-common |
3.1-1 |
deb |
|
|
|
|
|
|
| libsemanage1 |
3.1-1+b2 |
deb |
|
|
|
|
|
|
| libsepol1 |
3.1-1 |
deb |
|
|
|
|
|
|
| libsmartcols1 |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| libss2 |
1.46.2-2 |
deb |
|
|
|
|
|
|
| libssl1.1 |
1.1.1n-0+deb11u3 |
deb |
|
|
|
|
|
|
| libstdc++6 |
10.2.1-6 |
deb |
|
|
|
|
|
|
| libsystemd0 |
247.3-7 |
deb |
|
|
|
|
|
|
| libtasn1-6 |
4.16.0-2 |
deb |
|
|
|
|
|
|
| libtinfo6 |
6.2+20201114-2 |
deb |
|
|
|
|
|
|
| libtirpc-common |
1.3.1-1 |
deb |
|
|
|
|
|
|
| libtirpc3 |
1.3.1-1 |
deb |
|
|
|
|
|
|
| libudev1 |
247.3-7 |
deb |
|
|
|
|
|
|
| libunistring2 |
0.9.10-4 |
deb |
|
|
|
|
|
|
| libuuid1 |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| libxxhash0 |
0.8.0-2 |
deb |
|
|
|
|
|
|
| libzstd1 |
1.4.8+dfsg-2.1 |
deb |
|
|
|
|
|
|
| login |
1:4.8.1-1 |
deb |
|
|
|
|
|
|
| logsave |
1.46.2-2 |
deb |
|
|
|
|
|
|
| lsb-base |
11.1.0 |
deb |
|
|
|
|
|
|
| mawk |
1.3.4.20200120-2 |
deb |
|
|
|
|
|
|
| mount |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| ncurses-base |
6.2+20201114-2 |
deb |
|
|
|
|
|
|
| ncurses-bin |
6.2+20201114-2 |
deb |
|
|
|
|
|
|
| openssl |
1.1.1n-0+deb11u3 |
deb |
|
|
|
|
|
|
| p11-kit-modules |
0.23.22-1 |
deb |
|
|
|
|
|
|
| p11-kit |
0.23.22-1 |
deb |
|
|
|
|
|
|
| passwd |
1:4.8.1-1 |
deb |
|
|
|
|
|
|
| perl-base |
5.32.1-4+deb11u2 |
deb |
|
|
|
|
|
|
| sed |
4.7-1 |
deb |
|
|
|
|
|
|
| sysvinit-utils |
2.96-7+deb11u1 |
deb |
|
|
|
|
|
|
| tar |
1.34+dfsg-1 |
deb |
|
|
|
|
|
|
| tzdata |
2021a-1+deb11u4 |
deb |
|
|
|
|
|
|
| util-linux |
2.36.1-8+deb11u1 |
deb |
|
|
|
|
|
|
| zlib1g |
1:1.2.11.dfsg-2+deb11u1 |
deb |
|
|
|
|
|
|
| java/jre |
11.0.16+8 |
generic |
|
|
|
|
|
|
| logback-classic |
1.5.6 |
maven |
|
|
|
|
|
|
| logback-core |
1.5.6 |
maven |
|
|
|
|
|
|
| demo |
0.0.1-SNAPSHOT |
maven |
|
|
|
|
|
|
| jackson-annotations |
2.17.1 |
maven |
|
|
|
|
|
|
| jackson-core |
2.17.1 |
maven |
|
|
|
|
|
|
| jackson-databind |
2.17.1 |
maven |
|
|
|
|
|
|
| jackson-datatype-jdk8 |
2.17.1 |
maven |
|
|
|
|
|
|
| jackson-datatype-jsr310 |
2.17.1 |
maven |
|
|
|
|
|
|
| jackson-module-parameter-names |
2.17.1 |
maven |
|
|
|
|
|
|
| micrometer-commons |
1.13.1 |
maven |
|
|
|
|
|
|
| micrometer-observation |
1.13.1 |
maven |
|
|
|
|
|
|
| jakarta.annotation-api |
2.1.1 |
maven |
|
|
|
|
|
|
| junit |
4.13.2 |
maven |
|
|
|
|
|
|
| byte-buddy-agent |
1.14.17 |
maven |
|
|
|
|
|
|
| byte-buddy |
1.14.17 |
maven |
|
|
|
|
|
|
| log4j-api |
2.14.0 |
maven |
|
|
|
|
|
|
| log4j-core |
2.14.0 |
maven |
|
|
|
|
|
|
| log4j-to-slf4j |
2.23.1 |
maven |
|
|
|
|
|
|
| tomcat-embed-core |
10.1.25 |
maven |
|
|
|
|
|
|
| tomcat-embed-el |
10.1.25 |
maven |
|
|
|
|
|
|
| tomcat-embed-websocket |
10.1.25 |
maven |
|
|
|
|
|
|
| apiguardian-api |
1.1.2 |
maven |
|
|
|
|
|
|
| assertj-core |
3.25.3 |
maven |
|
|
|
|
|
|
| hamcrest-core |
2.2 |
maven |
|
|
|
|
|
|
| hamcrest |
2.2 |
maven |
|
|
|
|
|
|
| junit-jupiter-api |
5.10.2 |
maven |
|
|
|
|
|
|
| junit-jupiter-engine |
5.10.2 |
maven |
|
|
|
|
|
|
| junit-jupiter-migrationsupport |
5.10.2 |
maven |
|
|
|
|
|
|
| junit-jupiter-params |
5.10.2 |
maven |
|
|
|
|
|
|
| junit-platform-commons |
1.10.2 |
maven |
|
|
|
|
|
|
| junit-platform-engine |
1.10.2 |
maven |
|
|
|
|
|
|
| junit-vintage-engine |
5.10.2 |
maven |
|
|
|
|
|
|
| mockito-core |
5.11.0 |
maven |
|
|
|
|
|
|
| mockito-junit-jupiter |
5.11.0 |
maven |
|
|
|
|
|
|
| objenesis |
3.3 |
maven |
|
|
|
|
|
|
| opentest4j |
1.3.0 |
maven |
|
|
|
|
|
|
| jul-to-slf4j |
2.0.13 |
maven |
|
|
|
|
|
|
| slf4j-api |
2.0.13 |
maven |
|
|
|
|
|
|
| spring-boot-autoconfigure |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot-starter-json |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot-starter-logging |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot-starter-tomcat |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot-starter-web |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot-starter |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-boot |
3.3.1 |
maven |
|
|
|
|
|
|
| spring-aop |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-beans |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-context |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-core |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-expression |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-jcl |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-web |
6.1.10 |
maven |
|
|
|
|
|
|
| spring-webmvc |
6.1.10 |
maven |
|
|
|
|
|
|
| snakeyaml |
2.2 |
maven |
|
|
|
|
|
|
| byte-buddy |
1.12.6 |
maven |
|
|
|
|
|
|
| byte-buddy-agent |
1.12.6 |
maven |
|
|
|
|
|
|
| byte-buddy-dep |
1.12.6 |
maven |
|
|
|
|
|
|
| commons-io |
2.11.0 |
maven |
|
|
|
|
|
|
| commons-lang3 |
3.7 |
maven |
|
|
|
|
|
|
| cyclonedx-core-java |
5.0.4 |
maven |
|
|
|
|
|
|
| isorelax |
20090621 |
maven |
|
|
|
|
|
|
| jackson-annotations |
2.12.4 |
maven |
|
|
|
|
|
|
| jackson-core |
2.12.4 |
maven |
|
|
|
|
|
|
| jackson-databind |
2.12.4 |
maven |
|
|
|
|
|
|
| jackson-dataformat-xml |
2.12.4 |
maven |
|
|
|
|
|
|
| jackson-module-jaxb-annotations |
2.12.4 |
maven |
|
|
|
|
|
|
| jakarta.activation-api |
1.2.1 |
maven |
|
|
|
|
|
|
| jakarta.xml.bind-api |
2.3.2 |
maven |
|
|
|
|
|
|
| javax.json |
1.1.4 |
maven |
|
|
|
|
|
|
| javax.json-api |
1.1.4 |
maven |
|
|
|
|
|
|
| jbom |
1.2.1 |
maven |
|
|
|
|
|
|
| jsch |
0.1.55 |
maven |
|
|
|
|
|
|
| json-schema-validator |
1.0.58 |
maven |
|
|
|
|
|
|
| maven-model |
3.8.4 |
maven |
|
|
|
|
|
|
| packageurl-java |
1.4.0 |
maven |
|
|
|
|
|
|
| plexus-utils |
3.3.0 |
maven |
|
|
|
|
|
|
| slf4j-api |
1.7.2 |
maven |
|
|
|
|
|
|
| slf4j-nop |
1.7.33 |
maven |
|
|
|
|
|
|
| spring-boot-starter-test |
|
maven |
|
|
|
|
|
|
| spring-boot-starter-web |
|
maven |
|
|
|
|
|
|
| stax2-api |
4.2.1 |
maven |
|
|
|
|
|
|
| woodstox-core |
6.2.4 |
maven |
|
|
|
|
|
|
| xsdlib |
2013.6.1 |
maven |
|
|
|
|
|
|
| spring-boot-jarmode-tools |
3.3.1 |
maven |
|
|
|
|
|
|
| app |
0.0.1-SNAPSHOT |
maven |
|
|
|
|
|
|
| jrt-fs |
11.0.16 |
maven |
|
|
|
|
|
|