On 2026-07-26, Jaikiran Pai wrote: > I was trying to investigate some issue with Ant on JDK 8. Against the > latest master branch I ran "./bootstrap.sh" with JAVA_HOME pointing to > JDK 8. That runs into the exception I have pasted below. I haven't yet > looked up the SBOM expectations. Is SHA3-256 mandatory for the SBOMs > or should we be using a different one when SHA3-256 isn't available?
This the the CycloneDX Core Java library not checking whether the required algorithms are there. I've opened https://github.com/CycloneDX/cyclonedx-core-java/issues/848 a while ago. If this causes a problem we could make SBOM generation make dependent on Java 9+. Stefan --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
