Links

Add date bounds to OWASP suppressions

org.openrewrite.xml.security.AddOwaspDateBoundSuppressions Adds an expiration date to all OWASP suppressions in order to ensure that they are periodically reviewed. For use with the OWASP dependency-check tool. More details: https://jeremylong.github.io/DependencyCheck/general/suppression.html.

Source

  • groupId: org.openrewrite
  • artifactId: rewrite-xml
  • version: 7.38.0

Options

Type
Name
Description
String
untilDate
Optional. Optional. The date to add to the suppression. Default will be 30 days from today.

Usage

This recipe has no required configuration parameters and comes from a rewrite core library. It can be activated directly without adding any dependencies.
Gradle
Maven POM
Maven Command Line
build.gradle
plugins {
id("org.openrewrite.rewrite") version("5.38.0")
}
rewrite {
activeRecipe("org.openrewrite.xml.security.AddOwaspDateBoundSuppressions")
}
repositories {
mavenCentral()
}
pom.xml
<project>
<build>
<plugins>
<plugin>
<groupId>org.openrewrite.maven</groupId>
<artifactId>rewrite-maven-plugin</artifactId>
<version>4.42.0</version>
<configuration>
<activeRecipes>
<recipe>org.openrewrite.xml.security.AddOwaspDateBoundSuppressions</recipe>
</activeRecipes>
</configuration>
</plugin>
</plugins>
</build>
</project>
You will need to have Maven installed on your machine before you can run the following command.
shell
mvn -U org.openrewrite.maven:rewrite-maven-plugin:run \
-Drewrite.activeRecipes=org.openrewrite.xml.security.AddOwaspDateBoundSuppressions

See how this recipe works across multiple open-source repositories

Moderne Link Image
The Moderne public SaaS instance enables you to easily run recipes across thousands of open-source repositories.
Please contact Moderne for more information about safely running the recipes on your own codebase in a private SaaS.