Security Automation with Ansible 2

OWASP Dependency-Check

OWASP Dependency-Check is an open source tool to perform checks for known vulnerabilities in Java and .NET applications primarily. It also supports other platforms such as Node.js and Python as an experiment analyzer. This can also produce false positives and can be configured to fine tune the scanning as required.

This tool can also be run in multiple ways such as CLI, build tools (Ant, Gradle, Maven, and so on) and CI/CD (Jenkins) process.

More details about the project can be found at https://www.owasp.org/index.php/OWASP_Dependency_Check.

The following code snippet is to set up and perform a scan using OWASP Dependency-Check tool on vulnerable Java project:

- name: OWASP Dependency Check Playbook hosts: scanner ...