OWASP Find Security Bugs

Find Security Bugs is a SpotBugs plugin for security audits of Java web applications and Android applications. It can detect 128 different vulnerability types including Command Injection, XPath Injection, SQL/HQL Injection, XXE and Cryptography weaknesses. SpotBugs is a static analysis tool that targets Java but also works with Groovy, Scala and Kotlin projects.

:bug: Bugs Patterns

See the Bugs Patterns covered by Find Security Bugs.

:bulb: FindsecBugs Maven Configuration

Hands on with Example Project.

:construction_worker: Task

• Configure FindSecBugs or other security audit library in your github project.

• Fix any security vulnerabilities in your project. If none exist, simulate a vulnerability to test the pipeline.

• Identify the vulnerability you fixed with OWASP Top 10 Security Risks.

• Run FindSecBugs in your pipeline to continuously scan security issues in your github project.

Create one pull request for your project according to Task Submission Guidelines.