Search Gradle plugins

Sets resolution strategies for known CVE reports

• #cve
• #security
• #dependencies

Gradle plugin that orchestrates dependency analysis, SBOM generation, CVE scanning, and duplicate class detection to identify redundant dependencies in JVM applications. Developed at UBC Okanagan Computer Science.

• #dependencies
• #security
• #analysis
• #sbom
• #cve
• #dependency-management
• #static-analysis

Gradle plugin to integrate osv-scanner (vulnerability scanning) into a gradle project.

• #osv-scanner
• #security
• #owasp
• #cve
• #nvd
• #vulnerability
• #osv
• #devsecops

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Manage vulnerability records as code. Validate Vulnlog YAML files, generate suppression files for downstream scanners (Trivy, Snyk, generic format), and produce self-contained HTML vulnerability reports.

• #vulnlog
• #vulnerability
• #security
• #cve
• #audit
• #suppression
• #sca
• #trivy
• #snyk

Checks dependencies for known vulnerabilities

• #cve
• #audit
• #security
• #dependencies