Search Gradle plugins

Configures conventions for Xenit private packages

• #conventions
• #repository-replacement
• #repositories
• #security

Configures conventions for Xenit open source packages

• #conventions
• #repository-replacement
• #repositories
• #security

Adds OCI annotations to Docker images indicating the source repository and commit

• #conventions
• #repository-replacement
• #repositories
• #security

Performs pre-publish check for requirements for publishing to Maven Central, also when publishing snapshots

• #conventions
• #repository-replacement
• #repositories
• #security

Configures publication to Maven Central using the Sonatype Central Portal

• #conventions
• #repository-replacement
• #repositories
• #security

Gradle plugin to integrate osv-scanner (vulnerability scanning) into a gradle project.

• #osv-scanner
• #security
• #owasp
• #cve
• #nvd
• #vulnerability
• #osv
• #devsecops

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

Applies the secrets plugin to every project in a multi-module build.

• #secrets
• #configuration
• #hoplite
• #security
• #settings
• #multi-module

A type-safe gradle plugin for retrieving sensitive configuration from environment variables, files, and Gradle properties

• #secrets
• #configuration
• #hoplite
• #security

Fact-based supply chain audit tool for Gradle dependencies.

• #audit
• #metrics
• #dependencies
• #security
• #supply-chain