Find insecure Java cryptography
Recipe ID
io.moderne.cryptography.agilesec.FindInsecureJavaCryptographyArtifactio.moderne.recipe:rewrite-cryptographyDetects insecure JCA/JCE and BouncyCastle cryptographic algorithm usages and records them in a cipher inventory data table.
Single recipeProprietary
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe io.moderne.cryptography.agilesec.FindInsecureJavaCryptographyIf the recipe isn’t available locally, install it with:
mod config recipes jar install io.moderne.recipe:rewrite-cryptography:RELEASEData tables
Structured output this recipe can produce.
- Cipher inventoryCryptographic algorithm usages detected in source code, including the algorithm, its function, the library and language, the precise source location, and repository provenance.
io.moderne.cryptography.agilesec.table.CipherInventoryTable - Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats