clojurescript 2020-08-31

Sean Poulter20:08:11

What tools do folks use to scan their ClojureScript projects for security vulnerabilities and CVEs? I haven’t found any off-the-shelf tools in a quick search online.

Sean Poulter20:08:50

I’ve found https://github.com/rm-hull/lein-nvd but we’re using deps.edn. :thinking_face:

nwjsmith20:08:42

Are you using Maven as a build tool? Or a deps-based build tool?

nwjsmith20:08:43

😅 I just realized which channel I am in

nwjsmith20:08:48

😁 3

nwjsmith20:08:14

I was going to recommend the NVD plugin for Maven, but that probably doesn't apply to your project

👍 3

nwjsmith20:08:52

nothing listed in https://github.com/clojure/tools.deps.alpha/wiki/Tools either...

🎉 3

Sean Poulter20:08:51

Thanks for both suggestions. I hadn’t found that last page. 😀

souenzzo08:09:38

You can generare a POM and run java stuff on it. Same for npm deps

👍 3

Sean Poulter22:09:21

Thanks @U2J4FRT2T! We'll have a look at that.

2020-08-31

Channels