Audit tool to monitor Knot.x vulnerabilities

[tomaszmichalak]

Is your feature request related to a problem? Please describe. When customers ask why they should update Knot.x, we don't have a list of the detected vulnerabilities.

Describe the solution you'd like We want to be able to monitor Knot.x dependencies and explain what vulnerabilities were found in the last released version.

Describe alternatives you've considered

• Dependabot (it is not working because we use BOM)
• Gradle plugin (like https://github.com/sonatype-nexus-community/ossindex-gradle-plugin)

PRs

• https://github.com/Knotx/knotx-commons/pull/47
• https://github.com/Knotx/knotx-junit5/pull/77

Additional context

• Security