[Java] Almost none of the real world apps are building with Java 21

[prabhu]

We upgraded the jdk image to 21. Almost nothing builds with Java 21. Most apps still require Java 11, while some are working with 17.

[prabhu]

We have released an unofficial cdxgen image with Java 11, maven 3.6, and gradle 7. The image name is ghcr.io/appthreat/cdxgen-java:v10

Example invocation:

docker run --rm -v /tmp:/tmp -v $(pwd):/app:rw -e CDXGEN_DEBUG_MODE=debug -t ghcr.io/appthreat/cdxgen-java:v10 -r /app -t java -o /app/bom.json

We also have an equivalent dotnet with the legacy .Net core 3.1. The image name for this is ghcr.io/appthreat/cdxgen-dotnet:v10

[prabhu]

Maven 4 release is also imminent. Not sure when would be the right time to update the images.