Scan Maven Dependencies for Security Vulnerabilities using Github Actions — Takes less than 5 minutes!

Keith Weaver
3 min readJan 14, 2020

The original post was on my website.

In this lesson, I’m going to setup how to scan for security vulnerabilities in Maven packages. They will happen on every push to all branches using Github Actions. I will be leveraging this library.

The assumption is you have a Maven project setup and some basic understanding of Maven. First step is to build your JAR

mvn clean package

--

--