Search Gradle plugins

Kotlin/Web latest tools configuration

• #kotlin
• #kotlin-js
• #javascript
• #tools
• #security

** Discontinued ** This plugin is discontinued and should not be used. You will not be able to scan an app anymore with this plugin, and need to switch to the CLI for integration. Continuous Integration of app scanning using Guardsquare AppSweep.

• #appsweep
• #android-development
• #security-tools
• #app-testing

Checks if a library is still active, i.e. for a predefined age limit either the latest library release is not older than the limit or there are commits for that library on GitHub not older than the limit.

• #activity
• #libraries
• #dependency-analysis
• #maintained-security
• #reporting-tool

Adds a Maven-style META-INF/maven/<groupId>/<artifactId>/pom.properties to the main jar, wired by convention from the project's group, name and version so Maven-aware tooling (SBOM generators, classpath inspectors, security scanners) can identify the artifact a jar belongs to. The generated file is deterministic with no timestamp, keeping archives reproducible.

• #maven
• #pom
• #metadata
• #sbom
• #packaging

ArchGuard is a static code analysis tool that helps you to find security vulnerabilities in your code.

• #architecture
• #archguard
• #guard
• #lint

Aggregates grype/trivy scan results, applies per-tool severity gates, and writes a markdown + json summary report

• #deltafi
• #DeltaFi
• #security

Fact-based supply chain audit tool for Gradle dependencies.

• #audit
• #metrics
• #dependencies
• #security
• #supply-chain

GitLeaks gradle plugin is an analysis tool based on https://github.com/zricethezav/gitleaks used to find secrets pushed into the SCM repository.

• #git-leaks
• #gitleaks
• #gradle-plugin
• #leaks-detection
• #security