Measure the health of your applications with the Assessment Center in VMware Tanzu Platform hub

You can use the Tanzu Assessment Center to get an overview of the health and security of your applications prior to onboarding any infrastructure, allowing you a clear view of the benefits of bringing your organization into the Tanzu ecosystem. Assessments are available independently of a subscription to existing VMware Tanzu services and can be leveraged by prospective and existing customers alike.

How do I run a Spring health assessment

If you have Spring projects, the Spring health assessment can provide insight into how vulnerable and well-supported your Spring libraries are. From there, the assessment determines how much effort is required to upgrade. If your upgrade effort is significant, you should speak with a Tanzu sales representative about which services can help you.

Before you begin

Make sure you have everything you need in your environment before running the Spring health assessment:

• Download a local copy of the Spring project you want to assess.
• Verify you have Java Development Kit installed locally, and that it matches the version used in your Spring project.
• Ensure you have Gradle or Maven build automtation tools installed locally, depending on which is deployed in your Spring project.

Run a Spring health assessment from Tanzu Platform hub

1. From Tanzu Platform hub, click Assessment Center.

2. On the Spring Health tile, click Start Assessment.

3. To download the correct script, click the tab that corresponds to your OS and build automation tool.

4. Copy the script to your Spring project and run it. The Assessment Center provides detailed instructions on how to run the script.

5. When the script successfully completes, you can find the software bill of materials (SBOM) file in JSON format at <spring project directory>/assessment.

6. In the Assessment Center dialog, click Next.

7. Click Upload File and select the SBOM file.

8. Click Next.

9. Enter a name for the assessment and click Generate.

After the SBOM file finishes process you can automatically view the assessment results. From this screen, you may choose to download the assessment as PDF report, or start a new assessment.

Note

On the assessment summary page, only unique package instances are considered for calculating values.

Troubleshooting

Review this section to resolve challenges running the script according to the error message provided.

Missing pre-requisite. Verify it by building the project.

This error occurs when the script doesn’t detect required dependencies in your project. To resolve, build your Spring project manually and verify it has the dependencies required to generate the SBOM file.

Maximum supported size for file upload is 10 MB

This error indicates the SBOM file exceeds the maximum size limit of 10 MB. In this case, you must a choose a smaller Spring project to assess.

Mismatching Java version

This means the Java version detected in your local environment doesn’t match the version of Java used in your Spring project. To correct:

1. Check the Java version configured for the project.

2. Check the Java version installed on your local machine.

3. Update the Java versions if necessary.

Timed out

The operation may have hung on your local machine. Rerun the assessment report and try again.