Spring Boot Actuator "manifest" endpoint

[philsttr]

I'd like an actuator endpoint that shows details of the jars that are included in the spring boot application.

Perhaps the endpoint id could be "manifest".

Some examples of things that could be discovered and reported for each jar:

• jar filename
• Identifying details from META-INF/MANIFEST.MF (subset of main attributes. no per-entry attributes)
  • Name
  • Automatic-Module-Name
  • Specification-Title/Version
  • Implementation-Title/Version
• Identifying details from META-INF/**/pom.properties
  • version
  • groupId
  • artifactId

I haven't fully thought through all the intricacies, so I'm happy to discuss further.

[wilkinsona]

Thanks for the suggestion. This seems, somewhat at least, similar to #1465.

[philwebb]

It's also somewhat related to the existing InfoEndpoint/InfoContributor areas. I've generally preferred git info for this kind of thing. The git sha doesn't give much away if it's accidentally exposed, but you can use it to discover exactly what was in your jar at the time it was created.

[philsttr]

@philwebb, Yes, I agree that given a git sha and/or app version from the info endpoint, you can do additional detective work to figure out what was packaged within an app. i.e. look at some report (if it exists) from the app build output for the specific version, or go grab the artifact and peek inside it.

I'm looking to short-circuit that detective work by just obtaining that info from the running app instance, since it has absolute knowledge about the jars in the app.

Currently, actuator exposes information on A) the beans that are running (beans endpoint), and B) the configuration (env endpoint). The next logical extension is to add a third dimension... C) the version of those beans. With those three dimensions, I can have a complete view of a running instance. And yes, as mentioned, C can currently be derived from app version from the info endpoint, but it takes some additional detective work. I'd love if it was a bit easier.

Thanks for considering this feature!