modern-java-practices icon indicating copy to clipboard operation
modern-java-practices copied to clipboard

Find additional security plugins for Gradle and Maven

Open jwlibby opened this issue 1 year ago • 0 comments

Choose a build plugin to bake "security checks" into Gradle and Maven, and avoid configuring each tool separately.

  1. Identify at least a few plugins for security and create spike issues to try out the plugins
  2. Separate chapter in wiki on build plugins.
  3. Updates to relevant wiki pages to reference these.
    • https://github.com/binkley/modern-java-practices/wiki/Shift-security-left

Reference the spotbugs security plugin.

Note the existing use of find-sec-bugs (a plugin for Spotbugs) -- this card can do more.

jwlibby avatar May 22 '24 14:05 jwlibby