Search Gradle plugins

Configures conventions for Xenit open source packages

• #conventions
• #repository-replacement
• #repositories
• #security

Adds OCI annotations to Docker images indicating the source repository and commit

• #conventions
• #repository-replacement
• #repositories
• #security

Performs pre-publish check for requirements for publishing to Maven Central, also when publishing snapshots

• #conventions
• #repository-replacement
• #repositories
• #security

Configures publication to Maven Central using the Sonatype Central Portal

• #conventions
• #repository-replacement
• #repositories
• #security

A Gradle plugin that detects unintentional changes to Android's merged AndroidManifest.xml.

• #android
• #manifest
• #security
• #gradle-plugin

Kotlin/Web latest tools configuration

• #kotlin
• #kotlin-js
• #javascript
• #tools
• #security

Generates lock files for npm/Java builds and auto-downloads Trivy for vulnerability scanning

• #security
• #trivy
• #vulnerability
• #scanning
• #npm
• #lockfile

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

Manages cosign binary lifecycle and provides tasks for container image signing and attestation

• #security
• #cosign
• #signing
• #attestation
• #container
• #sigstore

Gradle plugin to integrate osv-scanner (vulnerability scanning) into a gradle project.

• #osv-scanner
• #security
• #owasp
• #cve
• #nvd
• #vulnerability
• #osv
• #devsecops