Is there any OWASP checking tool for scala project? -
i found there owasp dependency checking tool java projects: https://www.owasp.org/index.php/owasp_dependency_check
i tried tool on scala projects, can find no dependencies.
is there similar thing scala projects?
there 1 (june 2016): albuch/sbt-dependency-check
alexander v. buchholtz.
sbt plugin owasp dependencycheck.
can used monitor dependencies used in application , report if there publicly known vulnerabilities (e.g. cves).runs dependency-check against current project,its aggregate , dependencies , generates report each project.
you need add project/plugins.sbt
addsbtplugin("net.vonbuchholtz" % "sbt-dependency-check" % "0.1.4")
and after call
$ sbt dependencycheck
the report written location crosstarget.value(by default target/scala-2.11/).