📁 Java Security Fixer

Project case study

Java Security Fixer

Bring scattered static-analysis findings into a workflow developers can review safely.

Java 21Spring BootPostgreSQLDocker

The approach

A Spring Boot application that connects Semgrep, SpotBugs and FindSecBugs findings with CWE and OWASP context. It includes isolated workspaces, file validation, diff previews and user-approved fixes.

Results and scope

What the project demonstrates

Uploaded code is not executed during analysis; proposed changes are not applied to production code without approval. The repository documents validation and rollback.

How it works

  1. Validate Java input in an isolated workspace
  2. Link Semgrep / SpotBugs findings to CWE context
  3. Review the diff, approve and validate in a separate copy

Run locally

Windows PowerShell: run from the repository root. See the README for required settings and dependencies.

Copy-Item .env.example .env
docker compose config
docker compose up --build

Check

cd backend
.\mvnw.cmd test
.\mvnw.cmd verify

Scope and limitations

Static analysis can produce false positives and negatives. A proposed fix still requires developer review and tests.

Technical documentation ↗

Source code ↗Back to portfolio