Remediate OWASP A06:2021 Vulnerable and outdated components
Recipe ID
org.openrewrite.java.security.OwaspA06Artifact
org.openrewrite.recipe:rewrite-java-securityOWASP A06:2021 describes failures related to vulnerable and outdated components.
Usage
This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.
mod run . --recipe org.openrewrite.java.security.OwaspA06If the recipe isn’t available locally, install it with:
mod config recipes jar install org.openrewrite.recipe:rewrite-java-security:3.36.0Definition
This recipe runs the following recipes in order.
- Find and fix vulnerable Maven/Gradle dependencies
org.openrewrite.java.dependencies.DependencyVulnerabilityCheck
Data tables
Structured output this recipe can produce.
- Maven metadata failuresAttempts to resolve maven metadata that failed.
org.openrewrite.maven.table.MavenMetadataFailures - Vulnerability reportA vulnerability report that includes detailed information about the affected artifact and the corresponding CVEs.
org.openrewrite.java.dependencies.table.VulnerabilityReport - Dependency origins reportA report that maps dependencies to their originating root node represented as dependency graph. The information can be used to understand which direct dependencies are responsible for bringing in specific transitive dependencies.
org.openrewrite.java.dependencies.table.DependencyOriginsReport - Source files that had resultsSource files that were modified by the recipe run.
org.openrewrite.table.SourcesFileResults - Source files that had search resultsSearch results that were found during the recipe run.
org.openrewrite.table.SearchResults - Source files that errored on a recipeThe details of all errors produced by a recipe run.
org.openrewrite.table.SourcesFileErrors - Recipe performanceStatistics used in analyzing the performance of recipes.
org.openrewrite.table.RecipeRunStats