Apt on Micha Kops' Tech Notes

CVE Scanning and Guided Remediation with OSV Scanner

Fri, 28 Mar 2025 00:00:00 +0100

Figure 1. OSV Scanner

Security is a critical aspect of software development, and staying ahead of vulnerabilities is essential for us application developers. Google’s OSV Scanner is a powerful tool that helps detect vulnerabilities in open-source dependencies.

This article will guide us through setting up and using OSV Scanner to secure our projects, scan for invalid licenses, scan OCI images and finally how to fix findings via guided remediation.

Install Docker on Linux

Fri, 14 May 2021 00:00:00 +0200

Goals

Installing a specific Docker version on (Debian-based) Linux
Freeze the version to avoid automatic updates

Installation

curl -fsSL https://download.docker.com/linux/ubuntu/gpg | sudo apt-key add - (1)

sudo add-apt-repository \ (2)
   "deb [arch=amd64] https://download.docker.com/linux/ubuntu \
   $(lsb_release -cs) \
   stable"

sudo apt-get update (3)

sudo apt-get install -y docker-ce=18.06.1~ce~3-0~ubuntu (4)

sudo apt-mark hold docker-ce (5)

1	Add the Docker GPG key
2	Add the Docker repository
3	Update the index
4	Install docker
5	Freeze the version to avoid unwanted automatic updates

Generating Java Source Files with JavaPoet

Sat, 28 Feb 2015 00:00:00 +0100

For the most of us developers, generating Java source files is an occasionally happening task and we’re dealing with it e.g. when writing annotation processors, writing tools or interacting with meta-data files.

JavaPoet is a nice library to simplify such tasks, offering an intuitive fluent-builder API to generate source files in no time.

In the following tutorial I’d like to share a few examples by writing code generators with the help of this library.