Software bill of materials telemetry extensions for full stack observability

A tangible, non-transitory, computer-readable medium having computer-executable instructions stored thereon that, when executed by a processor on a computer, cause the computer to perform a method comprising:

• determining, by an observability extension that monitors an application, one or more of an environment variable or an application property variable of the application that specifies an accessible location for a software bill of materials of the application;
• generating, by the observability extension, an indication of the accessible location for the software bill of materials of the application based on a value of the one or more of the environment variable or the application property variable;
• intercepting, by the observability extension, creation of an observability-based data structure during monitoring of execution of the application, wherein the observability-based data structure comprises an observability span;
• and
• inserting, by the observability extension, the indication of the accessible location for the software bill of materials of the application into the observability-based data structure as a span attribute for transmission to an end recipient of the observability-based data structure.

An apparatus, comprising:

• one or more network interfaces to communicate with a network;
• a processor coupled to the one or more network interfaces and configured to execute one or more processes;
• and
• a memory configured to store a process that is executable by the processor, the process, when executed, configured to:
• determine one or more of an environment variable or an application property variable of the application that specifies an accessible location for a software bill of materials of the application;
• generate an indication of the accessible location for the software bill of materials of the application based on a value of the one or more of the environment variable or the application property variable;
• intercept creation of an observability-based data structure during monitoring of execution of the application, wherein the observability-based data structure comprises an observability span;
• and
• insert the indication of the accessible location for the software bill of materials of the application into the observability-based data structure as a span attribute for transmission to an end recipient of the observability-based data structure.