Search Gradle plugins

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

SonarQube analysis integration. Conditionally applies org.sonarqube and configures sonar.host.url, sonar.token, sonar.projectKey (as '<group>:<name>'), sonar.projectName, and sonar.projectVersion. Silently skips (no sonarqube task is registered) when STANO_SONAR_HOST_URL or STANO_SONAR_TOKEN are not configured. Optionally enforces quality gate with build failure via com.stano.sonar.fail-build-enabled.

• #convention
• #sonarqube
• #code-quality

Embeds an npm build's output into a Java jar's resources. Extends com.stano.npm (auto-applied) with an npmAssemble task that copies the npm dist output into build/resources/main/public. When the java plugin is also applied, jar depends on npmAssemble and test depends on npmTest.

• #convention
• #npm
• #node
• #frontend

Generic npm/Node build lifecycle support, usable on any npm project (standalone SPA, library, or embedded frontend) regardless of whether a Java plugin is applied. Registers npmVersion, npmInstall, npmClean (wired into clean), npmRunBuild, and npmTest tasks. Optionally builds via nvm (Node Version Manager) instead of a system-installed npm. When org.sonarqube is already applied (directly or on a parent project), configures sonar.sources for the JS source tree.

• #convention
• #npm
• #node
• #frontend

Adds Maven Central Portal publishing support: POM metadata, GPG signing, a staging-deploy publication, and a publishToMavenCentral upload task. Composable alongside private-repo publishing (e.g. com.stano.java-library). All POM/developer/license/component values are configured explicitly via the 'mavenCentralPublish' extension — no org-wide defaults are assumed.

• #publishing
• #maven-central
• #signing

Extends com.stano.base for multi-module library builds. Applies the base and jacoco plugins to the root project. Does not set a project version — intended for library repositories that manage versioning separately. Inherits the 'root' BaseExtension and the jacocoRootReport aggregate coverage task.

• #convention
• #library
• #jacoco

Opt-in Kotlin JVM support for com.stano.java subprojects. Applies the Kotlin JVM Gradle plugin and configures KotlinCompile tasks (incremental compilation, same lint/warning suppression free-compiler-args as the Java compiler). Requires com.stano.java to be applied to the subproject.

• #convention
• #kotlin
• #jvm

Docker container run lifecycle management. Registers dockerRun, dockerStop, dockerRemoveContainer, dockerRunStatus, and dockerNetworkModeStatus tasks. Configure the container via the dockerRun DSL: image, container name, ports, volumes, environment variables, command, network mode, and extra arguments. Supports daemonized containers (default) and ephemeral containers via clean=true (adds --rm).

• #convention
• #docker

Docker Compose file generation and lifecycle management. Registers generateDockerCompose (resolves artifact versions into a docker-compose.yml template), dockerComposeUp, and dockerComposeDown tasks. Configure the template path, output file, and token replacements via the dockerCompose DSL. Template tokens use {{group:name}} syntax and are resolved from the docker configuration or explicit templateToken(key, value) entries.

• #convention
• #docker
• #docker-compose

Docker image build, tag, and push support. Registers docker (build), dockerTag, dockerPush, dockerLogin, dockerLogout, dockerClean, and dockerCleanupImage tasks. Configure images via the docker DSL: image name, Dockerfile path, build args, labels, platforms, and additional build context files. Supports docker buildx (default) with multi-platform builds and automatic AWS ECR login. Automatically stamps images with build provenance labels (branch, commit hash, build number, repository URL). When com.stano.spring-boot is also applied, auto-configures the image name and wires bootWar output as the build context.

• #convention
• #docker