Group: GitHub Jasminguberinic

Sort by:Popular▼

✓Popular✓Newest

Detekt rules for OWASP Top 10 security vulnerabilities in Kotlin: SQL/command injection, weak crypto, path traversal, hardcoded credentials, insecure random, SSRF, unsafe deserialization, and sensitive data logging. Framework-agnostic — works with ...

Detekt security rules for Dropwizard: missing @RolesAllowed, insecure TLS config, JDBI SQL injection, EL injection in @SelfValidating, insecure cookies, admin connector exposure, Jackson polymorphism deserialization, and more.

Detekt security rules for Ktor: missing route authentication, insecure cookies, permissive CORS, weak JWT secrets, missing SSL redirect, missing rate limiting, Exposed ORM injection, hardcoded database passwords, and more.

Detekt security rules for Micronaut: missing @Secured, hardcoded secrets, insecure SSL config, Micronaut Data query injection, unsafe @Body types, and more.

Detekt security rules for Quarkus: missing @RolesAllowed, Panache raw queries, hardcoded @ConfigProperty secrets, OIDC misconfiguration, insecure REST clients, GraphQL auth gaps, gRPC without TLS, and 30+ more rules.

Detekt security rules for Spring Boot: missing @PreAuthorize, CSRF disabled, permissive CORS, SpEL injection, Thymeleaf SSTI, insecure actuator exposure, hardcoded datasource passwords, weak BCrypt rounds, JWT issues, and 45+ more rules.

Detekt security rules for Eclipse Vert.x: disabled TLS verification (trustAll), permissive CORS, unbounded BodyHandler, open SockJS event-bus bridge, insecure cookies, and more.

Detekt security plugin covering OWASP Top 10 for Kotlin/JVM — 200+ rules across Spring Boot, Quarkus, Dropwizard, Ktor, Micronaut, and Vert.x. Catches SQL injection, weak crypto, hardcoded secrets, insecure config, and more at compile time in CI.