← All recipes
Open source

Add date bounds to OWASP suppressions

Recipe IDorg.openrewrite.xml.security.AddOwaspDateBoundSuppressions
Artifactorg.openrewrite:rewrite-xml

Adds an expiration date to all OWASP suppressions in order to ensure that they are periodically reviewed. For use with the OWASP dependency-check tool. More details: https://jeremylong.github.io/DependencyCheck/general/suppression.html.

Single recipeApache 2.0

Usage

This recipe has no required configuration options. You’ll need the Moderne CLI configured before running the command below.

mod run . --recipe org.openrewrite.xml.security.AddOwaspDateBoundSuppressions

If the recipe isn’t available locally, install it with:

mod config recipes jar install org.openrewrite:rewrite-xml:8.88.0

Options

NameTypeDescription
untilDateStringOptional. The date to add to the suppression. Default will be 30 days from today.
e.g. 2023-01-01

Data tables

Structured output this recipe can produce.

  • Source files that had resultsSource files that were modified by the recipe run.org.openrewrite.table.SourcesFileResults
  • Source files that had search resultsSearch results that were found during the recipe run.org.openrewrite.table.SearchResults
  • Source files that errored on a recipeThe details of all errors produced by a recipe run.org.openrewrite.table.SourcesFileErrors
  • Recipe performanceStatistics used in analyzing the performance of recipes.org.openrewrite.table.RecipeRunStats