It helps me make good decisions about my project. When a vulnerability is found, the plugin provides a link to the Snyk website, which provides insights on the vulnerability severity and other important information. In this page click Add button and browse to your directory that contains Apache CXF, then click OK. Click Windows/Preferences/SOA Tools/Installed Runtimes to open an runtime configuration page. First of all, open your Eclipse IDE then click on Help menu > Eclipse marketplace and just type sts. Once you have all your uploads loaded, youll need to link CXF as your Installed runtime. Now I can analyze if I need to fix the problem with a newer version if that is available or I might choose to exclude the dependency altogether. To install STS in Eclipse there are a few simple steps to follow: Spring tool suite (STS) download.

Most of the time the vulnerability originates from an indirect dependency, and it would be difficult to find.

I personally like the fact that the integrated view shows me where the vulnerability comes from and how many layers deep it is. When a vulnerability is found, the plugin provides you with information about the vulnerability and even offers possible fixes when available. The Snyk plugin for Eclipse scans your dependencies, builds up a dependency tree and checks for any known vulnerabilities. The Snyk plugin offers broad language support within Eclipse, including Java, Scala, JavaScript.

Spring tools eclipse plugin