Search Gradle plugins

Owner: Gradle

Generates a dependency graph snapshot for any Gradle build, which can be submitted via the GitHub Dependency Submission API.

https://github.com/gradle/github-dependency-graph-gradle-plugin

Sources: https://github.com/gradle/github-dependency-extractor

Version 1.5.0 (latest)

Created 08 September 2026.

- Report the Gradle Build Tool running the build as an `org.gradle:gradle-core` dependency, so that GitHub can surface known vulnerabilities in the version of Gradle used to run the build. These are the coordinates that GitHub advisories for the Gradle Build Tool are published against. The entry is always reported as a 'direct' dependency with 'development' scope, and is not affected by the project, configuration or scope filters. - Dependency verification: releases are now signed with a new Gradle Inc. PGP key. The previously documented key `7B79ADD11F8A779FE90FD3D0893A028475557671` was revoked, and must be replaced with the new signing subkey `E2879931BCA1A42E55F2D64DD9B2DFBD9F3298BA`. See 'Dependency verification' in the README.

Add this plugin to your build using the plugins DSL:

plugins {
  id("org.gradle.github-dependency-graph-gradle-plugin") version "1.5.0"
}

See also:

  • Adding the plugin to build logic for usage in precompiled script plugins.

    See the relevant documentation for more information.

    Add this plugin as a dependency to <convention-plugins-build>/build.gradle(.kts):

    dependencies {
      implementation("org.gradle.github-dependency-graph-gradle-plugin:org.gradle.github-dependency-graph-gradle-plugin.gradle.plugin:1.5.0")
    }
    It can then be applied in the precompiled script plugin:
    plugins {
      id("org.gradle.github-dependency-graph-gradle-plugin")
    }
  • The legacy method of plugin application. See the relevant documentation for more information.
    buildscript {
      repositories {
        gradlePluginPortal()
      }
      dependencies {
        classpath("org.gradle.github-dependency-graph-gradle-plugin:org.gradle.github-dependency-graph-gradle-plugin.gradle.plugin:1.5.0")
      }
    }
    
    apply(plugin = "org.gradle.github-dependency-graph-gradle-plugin")
  • Applying plugins to all subprojects .