Search Gradle plugins

Generates lock files for npm/Java builds and auto-downloads Trivy for vulnerability scanning

• #security
• #trivy
• #vulnerability
• #scanning
• #npm
• #lockfile

Enables a Trivy scan for Gradle Distributions

• #materna
• #trivy

Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes.

• #security
• #trivy
• #cve
• #vulnerability
• #dependencies
• #docker

Manage vulnerability records as code. Validate Vulnlog YAML files, generate suppression files for downstream scanners (Trivy, Snyk, generic format), and produce self-contained HTML vulnerability reports.

• #vulnlog
• #vulnerability
• #security
• #cve
• #audit
• #suppression
• #sca
• #trivy
• #snyk

Adds 'grype' and 'trivy' tasks that scan the project's Docker image for vulnerabilities

• #deltafi
• #DeltaFi
• #security