You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@grails.apache.org by jd...@apache.org on 2026/10/06 22:51:27 UTC
(grails-core) 01/01: Merge pull request #16530 from apache/build/vulnerability-scan-plugin
This is an automated email from the ASF dual-hosted git repository.
jdaugherty pushed a commit to branch 7.0.x
in repository https://gitbox.apache.org/repos/asf/grails-core.git
commit 64dee339de66377a52e611636eb3ffbff27f2c83
Merge: 1115c5c3b0 38b83f6a13
Author: James Daugherty <jd...@jdresources.net>
AuthorDate: Tue Oct 6 18:51:21 2026 -0400
Merge pull request #16530 from apache/build/vulnerability-scan-plugin
Replace the Sonatype scan plugin with our own vulnerability scan
.github/scripts/ossIndexReport.sh | 94 -----
.github/scripts/vulnerabilityReport.sh | 42 ++
.github/workflows/gradle.yml | 5 +-
.github/workflows/vulnerability-scan.yml | 94 ++---
build-logic/README.md | 4 +-
build-logic/vulnerability-scan/build.gradle | 27 +-
.../apache/grails/buildsrc/scan/ApiCache.groovy | 128 ++++++
.../apache/grails/buildsrc/scan/ApiClient.groovy | 150 +++++++
.../org/apache/grails/buildsrc/scan/CvssV3.groovy | 94 +++++
.../buildsrc/scan/OssIndexAuditThrottle.groovy | 41 --
.../buildsrc/scan/OsvVulnerabilityService.groovy | 195 +++++++++
.../scan/SonatypeGuideVulnerabilityService.groovy | 237 +++++++++++
.../buildsrc/scan/VulnerabilityExclusion.groovy | 67 +++
.../scan/VulnerabilityScanExtension.groovy | 51 +++
.../buildsrc/scan/VulnerabilityScanPlugin.groovy | 271 +++++++-----
.../scan/VulnerabilityScanReportPlugin.groovy | 60 +++
.../scan/VulnerabilityScanReportTask.groovy | 226 ++++++++++
.../buildsrc/scan/VulnerabilityScanTask.groovy | 373 +++++++++++++++++
.../apache/grails/buildsrc/scan/CvssV3Spec.groovy | 58 +++
.../org/apache/grails/buildsrc/scan/OsvStub.groovy | 134 ++++++
.../scan/OsvVulnerabilityServiceSpec.groovy | 171 ++++++++
.../grails/buildsrc/scan/SonatypeGuideStub.groovy | 125 ++++++
.../SonatypeGuideVulnerabilityServiceSpec.groovy | 178 ++++++++
.../scan/VulnerabilityExclusionSpec.groovy | 61 +++
.../scan/VulnerabilityScanPluginSpec.groovy | 466 +++++++++++++++++++++
.../scan/VulnerabilityScanReportTaskSpec.groovy | 119 ++++++
.../buildsrc/scan/VulnerabilityScanTaskSpec.groovy | 58 +++
build.gradle | 1 +
dependencies.gradle | 36 +-
gradle.properties | 1 -
.../gsp-spring-boot/app/build.gradle | 3 +-
31 files changed, 3247 insertions(+), 323 deletions(-)