CyclonedxPluginActionIntegrationTests Class — spring-boot Architecture

Source Code

build-plugin/spring-boot-gradle-plugin/src/test/java/org/springframework/boot/gradle/plugin/CyclonedxPluginActionIntegrationTests.java lines 40–71

@GradleCompatibility
class CyclonedxPluginActionIntegrationTests {

	@SuppressWarnings("NullAway.Init")
	GradleBuild gradleBuild;

	@TestTemplate
	void sbomIsIncludedInUberJar() throws IOException {
		sbomIsIncludedInUberArchive("bootJar", "");
	}

	@TestTemplate
	void sbomIsIncludedInUberWar() throws IOException {
		sbomIsIncludedInUberArchive("bootWar", "WEB-INF/classes/");
	}

	private void sbomIsIncludedInUberArchive(String taskName, String sbomLocationPrefix) throws IOException {
		BuildResult result = this.gradleBuild.expectDeprecationWarningsWithAtLeastVersion("7.6.6").build(taskName);
		BuildTask task = result.task(":cyclonedxBom");
		assertThat(task).isNotNull().extracting(BuildTask::getOutcome).isEqualTo(TaskOutcome.SUCCESS);
		File[] libs = new File(this.gradleBuild.getProjectDir(), "build/libs").listFiles();
		assertThat(libs).hasSize(1);
		try (JarFile jar = new JarFile(libs[0])) {
			assertThat(jar.getManifest().getMainAttributes().getValue("Sbom-Format")).isEqualTo("CycloneDX");
			String sbomLocation = jar.getManifest().getMainAttributes().getValue("Sbom-Location");
			assertThat(sbomLocation).isEqualTo(sbomLocationPrefix + "META-INF/sbom/application.cdx.json");
			List<String> entryNames = jar.stream().map(JarEntry::getName).toList();
			assertThat(entryNames).contains(sbomLocation);
		}
	}

}