Search Gradle plugins

Generates lock files for npm/Java builds and auto-downloads Trivy for vulnerability scanning

• #security
• #trivy
• #vulnerability
• #scanning
• #npm
• #lockfile

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

Manages cosign binary lifecycle and provides tasks for container image signing and attestation

• #security
• #cosign
• #signing
• #attestation
• #container
• #sigstore

Wraps OWASP dep-scan for vulnerability scanning with reachability analysis

• #security
• #depscan
• #vulnerability
• #reachability
• #csaf
• #vex

OWASP dependency-check-gradle plugin.

• #owasp
• #dependency-check
• #security

Lightning-fast Gradle plugin that audits ProGuard/R8 obfuscation quality from mapping.txt and seeds.txt

• #android
• #proguard
• #r8
• #obfuscation
• #security
• #lint

Fact-based supply chain audit tool for Gradle dependencies.

• #audit
• #metrics
• #dependencies
• #security
• #supply-chain

Static analysis for Spring Boot projects using the SpringSentinel core engine.

• #spring
• #spring-boot
• #static-analysis
• #security
• #architecture

Kotlin compiler plugin that rewrites toString on @Redacted classes and properties to mask sensitive values.

• #kotlin
• #kotlin-compiler-plugin
• #redaction
• #tostring
• #logging
• #security

Compatibility alias for dependency analyze plugin id.

• #dependencies
• #security
• #license
• #report