search

binkley / modern-java-practices

Modern Java/JVM Build Practices
Other
943 stars 69 forks source link

Find additional security plugins for Gradle and Maven #493

Open jwlibby opened 4 months ago

jwlibby commented 4 months ago

Choose a build plugin to bake "security checks" into Gradle and Maven, and avoid configuring each tool separately.

  1. Identify at least a few plugins for security and create spike issues to try out the plugins
  2. Separate chapter in wiki on build plugins.
  3. Updates to relevant wiki pages to reference these.

Reference the spotbugs security plugin.

Note the existing use of find-sec-bugs (a plugin for Spotbugs) -- this card can do more.