On 26/07/26 8:55 pm, Stefan Bodewig wrote:
On 2026-07-26, Stefan Bodewig wrote:
On 2026-07-26, Jaikiran Pai wrote:
I was trying to investigate some issue with Ant on JDK 8. Against the
latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to
JDK 8. That runs into the exception I have pasted below. I haven't yet
looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs
or should we be using a different one when SHA3-256 isn't available?
This the the CycloneDX Core Java library not checking whether the
required algorithms are there. I've opened
https://github.com/CycloneDX/cyclonedx-core-java/issues/848 a while ago.
If this causes a problem we could make SBOM generation make dependent on
Java 9+.
I will just do that.
Thank you Stefan, I hadn't noticed the issue you filed with cyclonedx.
Requiring Java 9+ for SBOM generation sounds good to me. I just updated
my master branch which brings in your change and ran "./bootstrap.sh"
with Java 8 as well as Java 11. It builds fine on both versions and on
Java 11 I do see the SBOM generation happening.
-Jaikiran
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
