Search Gradle plugins

com.kynetics.gradle-vulnerability-fixer

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

https://kynetics.com

Sources: https://github.com/Kynetics/gradle-vulnerability-fixer.git

Version 0.1.0 (latest)

Created 05 August 2026.

Add this plugin to your build using the plugins DSL:

plugins {
  id("com.kynetics.gradle-vulnerability-fixer") version "0.1.0"
}

See also:

Adding the plugin to build logic for usage in precompiled script plugins.

See the relevant documentation for more information.

Add this plugin as a dependency to <convention-plugins-build>/build.gradle(.kts):
```
dependencies {
  implementation("com.kynetics.gradle-vulnerability-fixer:com.kynetics.gradle-vulnerability-fixer.gradle.plugin:0.1.0")
}
```
It can then be applied in the precompiled script plugin:
```
plugins {
  id("com.kynetics.gradle-vulnerability-fixer")
}
```

The legacy method of plugin application.

See the relevant documentation for more information.

buildscript {
  repositories {
    gradlePluginPortal()
  }
  dependencies {
    classpath("com.kynetics.gradle-vulnerability-fixer:com.kynetics.gradle-vulnerability-fixer.gradle.plugin:0.1.0")
  }
}

apply(plugin = "com.kynetics.gradle-vulnerability-fixer")

Applying plugins to all subprojects .