Understanding Gradle #30 – Discover Security Vulnerabilities

How does modularity in Java work (Part 5): Configure Gradle to Discover Security Vulnerabilities 🚀 Online course - Modern Gradle Fundamentals https://www.udemy.com/course/modern-gradle-fundamentals/?referralCode=3AC1B96C0EBE6F4FBE6E 🏎️ Training on your Gradle topics https://onepiece.software/#training ✨ Support with your Gradle project https://onepiece.software/#consulting 💚 Support my work https://paypal.me/onepiecesw 💙 Follow me on Mastodon https://mastodon.social/@jendrik ❤️ OWASP dependency check plugin: https://jeremylong.github.io/DependencyCheck/dependency-check-gradle ▶️ 0:00 Java Modularity 5 - Security Vulnerabilities ▶️ 1:24 Which classpath should I check? ▶️ 2:06 Apply the 'org.owasp.dependencycheck' plugin ▶️ 2:27 Configure the plugin ▶️ 3:03 Run the ':dependencyCheckAnalysisTask' ▶️ 3:34 React to a vulnerability in your dependencies ▶️ 4:40 React to a vulnerability in transitive dependencies ▶️ 6:00 Summary 💾 Example on GitHub (Kotlin DSL): https://github.com/jjohannes/understanding-gradle/tree/main/30_Security_Vulnerabilities 💾 Example on GitHub (Groovy DSL): https://github.com/jjohannes/understanding-gradle/tree/groovy-dsl/30_Security_Vulnerabilities 💾 Gradle Project Setup How-To: https://github.com/jjohannes/gradle-project-setup-howto Related Videos: ⏩ 08 Declaring Dependencies: https://www.youtube.com/watch?v=igug9tbl4J4&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 09 Centralizing Dependency Versions: https://www.youtube.com/watch?v=8044F5gc1dE&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 10 Dependency Version Conflicts: https://www.youtube.com/watch?v=YYWhfy6c2YQ&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 11 Capability Conflicts: https://www.youtube.com/watch?v=5g20kbbqBFk&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 26 The Classpath: https://www.youtube.com/watch?v=HqAp9JBl2_U&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 27 Multiple Compile Classpaths: https://www.youtube.com/watch?v=Z5n9VK3sOnI&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 28 Dependency Analysis Plugin: https://www.youtube.com/watch?v=Z5n9VK3sOnI&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE ⏩ 29 Detect and Resolve Collisions on a Classpath: https://www.youtube.com/watch?v=KocTqF0hO_8&list=PLWQK2ZdV4Yl2k2OmC_gsjDpdIBTN0qqkE Further Readings: 📕 OWASP dependency check plugin: https://jeremylong.github.io/DependencyCheck/dependency-check-gradle