Search Gradle plugins
| Plugin | Latest Version |
|---|---|
|
This plugin collects project information needed for SPDX SBOMS in project-isolated builds |
0.12.0
(14 July 2026) |
|
This plugin generates json formatted spdx sboms for gradle projects |
0.12.0
(14 July 2026) |
|
Adds SBOM-publication support based on the CycloneDX Gradle plugin. |
4.5.1
(14 July 2026) |
|
A Gradle plugin to check SBOM licenses against a policy. |
1.0.0
(24 March 2026) |
|
Wraps `docker buildx build` to expose BuildKit features (multi-platform builds, cache mounts, SBOM, provenance, registry cache) as a proper Gradle task DSL. Fills the gap left by gradle-docker-plugin and Jib, which predate/ignore BuildKit. |
0.1.0
(17 July 2026) |
|
Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible. |
0.1.0
(03 July 2026) |
|
Gradle plugin that orchestrates dependency analysis, SBOM generation, CVE scanning, and duplicate class detection to identify redundant dependencies in JVM applications. Developed at UBC Okanagan Computer Science. |
0.1.0
(16 April 2026) |
|
Accurate, publication-aware CycloneDX SBOM generation and normalization for Kotlin Mulitplatform |
0.0.3
(24 March 2026) |
|
Common tasks for Dependency Track interaction, like SBOM upload or VEX Generation |
1.4.4
(04 December 2025) |
|
A prototype spdx gradle plugin |
0.6.0
(01 September 2023) |