Generate BOM based on spring boot fat jar

[tutufool]

Hi,

I'm wondering whether I can generate org.cyclonedx.model.Bom with a spring boot fat jar.
(Say I dont have a maven project in hand, but only a spring boot fat jar)

Is there any chance that I can get a similar BOM file by analysis the spring boot fat jar without run maven plugin?

It seems to populate the "components" is sort of easy (1:1 mapping to the jars in fat jar)
But to populate the "dependencies" part still need maven resolving.

Any suggestions?

Thanks a lot!

[hboutemy]

It seems to populate the "components" is sort of easy (1:1 mapping to the jars in fat jar)

yes, just do it

[hboutemy]

thinking again at it: yes, it is what is done by many container image scanners