Owner:
Pascal K
Manage vulnerability records as code. Validate Vulnlog YAML files, generate suppression files for downstream scanners (Trivy, Snyk, generic format), and produce self-contained HTML vulnerability reports.
Version 0.12.0
Created 19 April 2026.
Supply chain security as code. Manage vulnerability records next to the source, validate Vulnlog YAML files, generate suppression files for downstream scanners (Trivy, Snyk, generic format), and produce self-contained HTML vulnerability reports.
Add this plugin to your build using the plugins DSL:
plugins {
id("dev.vulnlog.plugin") version "0.12.0"
}
See also:
-
Adding the plugin to build logic for usage in precompiled script plugins.
See the relevant documentation for more information.
Add this plugin as a dependency to
<convention-plugins-build>/build.gradle(.kts):dependencies { implementation("dev.vulnlog.plugin:dev.vulnlog.plugin.gradle.plugin:0.12.0") }It can then be applied in the precompiled script plugin:plugins { id("dev.vulnlog.plugin") } -
The legacy method of plugin application.
See the relevant documentation for more information.buildscript { repositories { gradlePluginPortal() } dependencies { classpath("dev.vulnlog.plugin:dev.vulnlog.plugin.gradle.plugin:0.12.0") } } apply(plugin = "dev.vulnlog.plugin") - Applying plugins to all subprojects .