Open
Description
Probably a new contrib script. The approach is as follows:
- Clear the maven, gradle, and sbt caches
- Generate the SBoM with cdxgen
- Manually collect the list of jars from both the application root and the caches directory
- Identify package misses
- Bonus - Compare hashes of the downloaded files with the ones in the SBoM
Repeat this process for multiple Java and Scala apps.