Remove redundant security resolution rules
Recipe ID
org.openrewrite.gradle.RemoveRedundantSecurityResolutionRulesArtifact
org.openrewrite:rewrite-gradleRemove resolutionStrategy.eachDependency rules that pin dependencies to versions that are already being managed by a platform/BOM to equal or newer versions. Only removes rules that have a security advisory identifier (CVE or GHSA) in the because clause, unless a custom pattern is specified.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.gradle.RemoveRedundantSecurityResolutionRulesIf the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite:rewrite-gradle:8.88.0Options
| Name | Type | Description |
|---|---|---|
securityPattern | String | A regular expression pattern to identify security-related resolution rules by matching against the because clause. Rules matching this pattern will be considered for removal. The pattern is searched within the clause, so a because containing multiple identifiers (e.g., CVE-2024-1234, GHSA-abcd-1234-efgh) will match if any identifier matches. Default pattern matches CVE identifiers (e.g., CVE-2024-1234) and GitHub Security Advisory identifiers (e.g., GHSA-xxxx-xxxx-xxxx).e.g. (CVE-\d|GHSA-[a-z0-9]) |
Data tables
Structured output this recipe can produce.
- Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats