Merge branch '3.3.x'

Closes gh-41891

spring-boot-project/spring-boot-actuator-autoconfigure/src/main/java/org/springframework/boot/actuate/autoconfigure/sbom/SbomEndpointAutoConfiguration.java

@@ -55,7 +55,7 @@ public class SbomEndpointAutoConfiguration {
 	@Bean
 	@ConditionalOnMissingBean
 	@ConditionalOnBean(SbomEndpoint.class)
-	@ConditionalOnAvailableEndpoint(exposure = EndpointExposure.WEB)
+	@ConditionalOnAvailableEndpoint(exposure = { EndpointExposure.WEB, EndpointExposure.CLOUD_FOUNDRY })
 	SbomEndpointWebExtension sbomEndpointWebExtension(SbomEndpoint sbomEndpoint) {
 		return new SbomEndpointWebExtension(sbomEndpoint, this.properties);
 	}

spring-boot-project/spring-boot-actuator-autoconfigure/src/test/java/org/springframework/boot/actuate/autoconfigure/sbom/SbomEndpointAutoConfigurationTests.java

@@ -36,9 +36,19 @@ class SbomEndpointAutoConfigurationTests {
 		.withConfiguration(AutoConfigurations.of(SbomEndpointAutoConfiguration.class));
 
 	@Test
-	void runShouldHaveEndpointBean() {
+	void runWhenWebExposedShouldHaveEndpointBeanAndWebExtension() {
 		this.contextRunner.withPropertyValues("management.endpoints.web.exposure.include=sbom")
-			.run((context) -> assertThat(context).hasSingleBean(SbomEndpoint.class));
+			.run((context) -> assertThat(context).hasSingleBean(SbomEndpoint.class)
+				.hasSingleBean(SbomEndpointWebExtension.class));
+	}
+
+	@Test
+	void runWhenCloudFoundryExposedShouldHaveEndpointBeanAndWebExtension() {
+		this.contextRunner
+			.withPropertyValues("management.endpoints.cloud-foundry.exposure.include=sbom",
+					"spring.main.cloud-platform=cloud_foundry")
+			.run((context) -> assertThat(context).hasSingleBean(SbomEndpoint.class)
+				.hasSingleBean(SbomEndpointWebExtension.class));
 	}
 
 	@Test