Search Gradle plugins

Want to include your Gradle plugin here?

Plugin	Latest Version
com.kynetics.gradle-vulnerability-fixer Scans Gradle dependencies and Docker base images with Trivy, auto-pins vulnerable versions, and commits fixes locally. Prerequisites: trivy, jq, tar. Install with: apt install -y jq tar curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh \| sh -s -- -b /usr/local/bin v0.72.0 Added tasks: gradleSecurityFix, baseImageSecurityFix (group: security). Both commit fixes to a local branch security/auto-fixes-YYYY-MM-DD. Push the branch and open a PR manually to apply the fixes. #security #trivy #cve #vulnerability #dependencies #docker	0.2.2 (20 August 2026)
dev.vulnlog.plugin Manage vulnerability records as code. Validate Vulnlog YAML files, generate suppression files for downstream scanners (Trivy, Snyk, generic format), and produce self-contained HTML vulnerability reports. #vulnlog #vulnerability #security #cve #audit #suppression #sca #trivy #snyk	0.16.0 (16 July 2026)
io.root.patcher Automatically patches vulnerable Java dependencies with secure versions from the Root.io registry — no changes to your dependency declarations required. #security #dependencies #vulnerability #patching	0.7.0 (12 August 2026)
com.fizzpod.osv-scanner Gradle plugin to integrate osv-scanner (vulnerability scanning) into a gradle project. #osv-scanner #security #owasp #cve #nvd #vulnerability #osv #devsecops	6.2.3 (08 August 2026)
io.github.mgerhardy.trivy Generates lock files for npm/Java builds and auto-downloads Trivy for vulnerability scanning #security #trivy #vulnerability #scanning #npm #lockfile	0.94 (07 August 2026)
dev.vulnlog.dslplugin The Vulnlog DSL definition for describing and tracking SCA vulnerability reports for your software project. #vulnlog #vl #sca #vulnerability #logging #security #tracking #dsl	0.9.4 (20 February 2026)
io.github.hangga.delvelin Java/Kotlin vulnerability analyzer with CWE and CVSS standards. #testing #analyzer #vulnerability #delvelin #cwe #cvss	0.2.2-beta (22 April 2025)
com.srcclr.gradle The SourceClear Gradle Plugin keeps your Gradle projects free from vulnerable components #security #components #vulnerabilities	3.1.12 (03 June 2022)
org.deltafi.docker-scan Adds 'grype' and 'trivy' tasks that scan the project's Docker image for vulnerabilities #deltafi #DeltaFi #security	2.61.4 (19 August 2026)
io.github.fso13.dependency-analyze Generates HTML report with dependency licenses and vulnerabilities. #dependencies #security #license #report	1.0.2 (09 May 2026)