Scan of Kotlin sources for an Android app

[sr-rolando]

Description

Current status

A trivy fs . scan inside the code directory of an Android app built using Kotlin results in Number of language-specific files num=0.

Idea

Add vulnerability scanning for Kotlin apps targeting Android. The file to scan would likely be gradle/libs.versions.toml for the list of dependencies including respective versions.

Target

Filesystem

Scanner

Vulnerability