bomber sbom scan generates warnings for older versions of 3rd party libraries I need to analyze sbom generated from my multi-module spring boot project.
