Search Gradle plugins

Aggregates grype/trivy scan results, applies per-tool severity gates, and writes a markdown + json summary report

• #deltafi
• #DeltaFi
• #security

A Gradle plugin for running OWASP ZAP security scans.

• #java
• #code quality
• #zap
• #dev ops
• #security

Compiles jGuard security policies (module-info.jguard) for capability-based JVM security

• #security
• #jguard
• #capability
• #sandbox
• #policy

A comprehensive security scanning plugin for Gradle projects

• #security
• #scanning
• #secrets
• #static-analysis

Ensures that there are no security problems with the code base

• #beekeeper

Gradle plugin for Contrast Security, enables the installation of the Contrast Java Agent, connection to TeamServer, and verifying applications against new vulnerabilities

• #contrast
• #security

Automate web application dynamic security scans using OWASP ZAP

• #security
• #devsecops

IBM Security AppScan Source Gradle Plugin

• #security
• #appscan

A build config is a generated class holding constants set by the build script. This plugin provides a secure interface to store your project constants.

• #android
• #buildconfig
• #secure
• #constants
• #generated
• #kotlin

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker