modern-java-practices
modern-java-practices copied to clipboard
Find additional security plugins for Gradle and Maven
Choose a build plugin to bake "security checks" into Gradle and Maven, and avoid configuring each tool separately.
- Identify at least a few plugins for security and create spike issues to try out the plugins
- Separate chapter in wiki on build plugins.
- Updates to relevant wiki pages to reference these.
- https://github.com/binkley/modern-java-practices/wiki/Shift-security-left
Reference the spotbugs security plugin.
Note the existing use of find-sec-bugs (a plugin for Spotbugs) -- this card can do more.