Search Gradle plugins

Ensures that there are no security problems with the code base

• #beekeeper

Gradle plugin for Contrast Security, enables the installation of the Contrast Java Agent, connection to TeamServer, and verifying applications against new vulnerabilities

• #contrast
• #security

Automate web application dynamic security scans using OWASP ZAP

• #security
• #devsecops

IBM Security AppScan Source Gradle Plugin

• #security
• #appscan

A build config is a generated class holding constants set by the build script. This plugin provides a secure interface to store your project constants.

• #android
• #buildconfig
• #secure
• #constants
• #generated
• #kotlin

Adds 'grype' and 'trivy' tasks that scan the project's Docker image for vulnerabilities

• #deltafi
• #DeltaFi
• #security

A Gradle plugin for Android builds that securely retrieves signing credentials and secrets from a Proton Pass vault.

• #android
• #signing
• #proton
• #protonpass
• #security
• #credentials

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Automatically patches vulnerable Java dependencies with secure versions from the Root.io registry — no changes to your dependency declarations required.

• #security
• #dependencies
• #vulnerability
• #patching

Securely hide secrets in native C++ code for Android and KMP projects.

• #security
• #secrets
• #kmp
• #android
• #obfuscation