Search Gradle plugins

Spring Security Maven Plugin is a Gradle plugin that provides tasks for publishing releases to Maven Central (Sonatype) and Spring (Artifactory) repositories.

• #spring
• #maven
• #nexus
• #artifactory

A Gradle plugin for starting mock services as Gradle tasks

• #mock
• #service
• #web

Provides Node.js and NPM tasks. No need to have Node.js installed as plugin will take care of caching and installation in a similar fashion as to have Gradle distributions are cached

• #nodejs
• #node.js
• #npm
• #javascript

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Summarize test executions after Gradle tasks have run

• #deltafi

Inserts and verifies the project license header on source files

• #deltafi
• #DeltaFi
• #license

Provide version tasks in root project

• #kotlin
• #kotlin-js
• #javascript
• #version

Provide publish tasks for gradle plugin project

• #kotlin
• #kotlin-js
• #javascript
• #publish

SonarQube analysis integration. Conditionally applies org.sonarqube and configures sonar.host.url, sonar.token, sonar.projectKey (as '<group>:<name>'), sonar.projectName, and sonar.projectVersion. Silently skips (no sonarqube task is registered) when STANO_SONAR_HOST_URL or STANO_SONAR_TOKEN are not configured. Optionally enforces quality gate with build failure via com.stano.sonar.fail-build-enabled.

• #convention
• #sonarqube
• #code-quality

Embeds an npm build's output into a Java jar's resources. Extends com.stano.npm (auto-applied) with an npmAssemble task that copies the npm dist output into build/resources/main/public. When the java plugin is also applied, jar depends on npmAssemble and test depends on npmTest.

• #convention
• #npm
• #node
• #frontend