Java Security Auth and Crypto Audit Bundle
Run a read-only Java security audit focused on authentication, credentials, secrets, cryptography, random number generation, password handling, cookies, JWTs, and TLS configuration.
This bundle runs 46 read-only Java security audit codemods. It is part of the split Java security audit set; run the other Java security audit bundles when you need broader coverage.
Included Codemods
- @codemod/detect-hard-coded-java-credentials@0.1.0
- @codemod/detect-hardcoded-credentials-java@0.1.0
- @codemod/detect-hardcoded-secrets-in-java@0.1.0
- @codemod/detect-hardcoded-secrets-java@0.1.0
- @codemod/detect-insecure-java-prng-security-use@0.1.0
- @codemod/detect-insecure-password-hashing-java@0.1.0
- @codemod/detect-obsolete-tls-protocol-usage@0.1.0
- @codemod/detect-request-derived-session-id-usage@0.1.0
- @codemod/detect-static-cloud-credentials-java@0.1.0
- @codemod/detect-weak-cryptographic-keys-java@0.1.0
- @codemod/detect-weak-java-crypto-keys@0.1.0
- @codemod/detect-weak-java-message-digests@0.1.0
- @codemod/detect-weak-java-tls-protocols@0.1.0
- @codemod/detect-weak-jwt-signature-algorithms@0.1.0
- @codemod/java-auth-enumeration-side-channel@0.1.0
- @codemod/java-auth-session-fixation-audit@0.1.0
- @codemod/java-auth-user-enumeration-checks@0.1.0
- @codemod/java-authorization-strong-decision-audit@0.1.0
- @codemod/java-cbc-predictable-iv-detection@0.1.0
- @codemod/java-cbc-predictable-iv-usage@0.1.0
- @codemod/java-cipher-mode-padding-risks@0.1.0
- @codemod/java-cookie-httponly-flag-audit@0.1.0
- @codemod/java-cookie-missing-httponly@0.1.0
- @codemod/java-cookie-missing-secure-flag@0.1.0
- @codemod/java-cookie-secure-attribute-audit@0.1.0
- @codemod/java-ctr-mode-iv-reuse-detection@0.1.0
- @codemod/java-detect-ctr-iv-reuse@0.1.0
- @codemod/java-detect-custom-crypto-algorithms@0.1.0
- @codemod/java-detect-insecure-password-storage@0.1.0
- @codemod/java-detect-missing-tls-hostname-check@0.1.1
- @codemod/java-detect-unverified-tls-certificates@0.1.0
- @codemod/java-detect-weak-cipher-algorithms@0.1.0
- @codemod/java-detect-weak-db-connection-passwords@0.1.0
- @codemod/java-detect-weak-db-passwords@0.1.0
- @codemod/java-detect-weak-hash-algorithms@0.1.0
- @codemod/java-hardcoded-credentials-detection@0.1.0
- @codemod/java-hardcoded-secrets-detection@0.1.0
- @codemod/java-insecure-cipher-transformation-miner@0.1.0
- @codemod/java-insecure-prng-in-security-contexts@0.1.0
- @codemod/java-insecure-tls-cert-validation@0.1.0
- @codemod/java-jwt-weak-signature-algorithm@0.1.0
- @codemod/java-missing-tls-hostname-verification@0.1.0
- @codemod/java-password-hash-weak-salt-inputs@0.1.0
- @codemod/java-predictable-secure-random-usage@0.1.0
- @codemod/java-secure-rng-predictable-values@0.1.0
- @codemod/java-weak-cipher-algorithm-audit@0.1.0