Search Gradle plugins

Verifies that ProGuard/R8 obfuscation actually renamed configured sensitive classes, not just that minification is enabled. Parses the R8 mapping.txt, checks a developer-declared list of sensitive classes, and generates a console/JSON report — optionally failing the build as a CI security gate.

• #proguard
• #r8
• #obfuscation
• #security
• #android

Gates avoidable alignment padding (column-tetris) in Postgres migration DDL, with a freeze-known-debt baseline for brownfield adoption.

• #postgres
• #migration
• #flyway
• #linter
• #database
• #alignment

A Gradle plugin that gates builds on Kover coverage thresholds and generates gap reports

• #coverage
• #kover
• #quality
• #testing

Sonar quality gate/profile administration and gate verification.

• #sonar
• #admin
• #gate
• #quality-gate

Gradle plugin to checks whether the quality meets the requirements of the specified quality gate

• #sonar
• #sonarcloud
• #sonarqube
• #qualitgate
• #quality

A plugin that check the Sonar Quality Gate status on the configured remote SonarQube or Sonarloud instance

• #demo
• #example
• #quickstart

Aggregates grype/trivy scan results, applies per-tool severity gates, and writes a markdown + json summary report

• #deltafi
• #DeltaFi
• #security

SonarQube analysis integration. Conditionally applies org.sonarqube and configures sonar.host.url, sonar.token, sonar.projectKey (as '<group>:<name>'), sonar.projectName, and sonar.projectVersion. Silently skips (no sonarqube task is registered) when STANO_SONAR_HOST_URL or STANO_SONAR_TOKEN are not configured. Optionally enforces quality gate with build failure via com.stano.sonar.fail-build-enabled.

• #convention
• #sonarqube
• #code-quality

Static analysis and workflow quality gates.

• #temporal
• #workflow
• #static-analysis
• #quality
• #java