A gradle plugin that allows for maven and gradle project (Java based) to be scanned for security vulnerabilities. The generated report is published to to a central private server @ reshift.reshiftsecurity.com in which users that have access to the projects can view security reports and perform other developer actions
Compile Dependencies (9)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Maven Plugins
Apache 2.0
|  | com.github.spotbugs
»
spotbugs-maven-plugin This Plug-In generates reports based on the SpotBugs Library | 3.1.9 | 4.10.5.0 |
Core Utils
Apache 2.0
|  | com.google.guava
»
guava2 vulnerabilities Guava is a suite of core and expanded libraries that include | 27.0-jre | 33.7.2-jre |
JSON Lib
Apache 2.0
|  | com.googlecode.json-simple
»
json-simple A simple Java toolkit for JSON | 1.1.1 | ✔ |
LGPL
|  | com.h3xstream.findsecbugs
»
findsecbugs-plugin Core module of the project. It include all the SpotBugs detectors. | 1.8.0 | 1.14.0 |
MIT
|  | com.kstruct
»
gethostname4j Simple JNA library to get the current machine's hostname from Java | 0.0.2 | 1.0.0 |
HTTP Clients
Apache 2.0
|  | com.squareup.okhttp3
»
okhttp1 vulnerability Square’s meticulous HTTP client for Java and Kotlin. | 3.13.1 | 5.5.0 |
I/O
Apache 2.0
|  | commons-io
»
commons-io2 vulnerabilities The Apache Commons IO library contains utility classes, stream implementations, file filters, | 2.6 | 2.22.0 |
MIT
|  | org.capnproto
»
runtime runtime | 0.1.3 | 0.1.16 |
Git Tool
BSD 3-clause +1
|  | org.eclipse.jgit
»
org.eclipse.jgit2 vulnerabilities Repository access and algorithms | 5.1.3.201810200350-r | 7.8.0.202609011348-r |