oscerd opened a new pull request, #25051: URL: https://github.com/apache/camel/pull/25051
## Summary Adds a new MCP tool `camel_dependency_security_audit` that performs security vulnerability analysis on a Camel project's dependencies by cross-referencing them with the Camel security advisory database. - **Per-artifact CVE matching**: scans declared POM dependencies against known Camel CVEs at the project's version - **Severity classification**: maps CVE titles to critical/high/medium severity - **Reachability analysis**: when routes are provided, flags whether a vulnerable artifact is directly used (reachable) or only a transitive dependency - **Upgrade recommendations**: suggests version upgrades and links to migration tools - **POM sanitization**: masks credentials before processing (via `PomSanitizer`) Distinct from `camel_dependency_check` (dependency hygiene) and `camel_security_advisories` (raw CVE listing) — this tool combines both into a project-specific vulnerability audit. ## Test plan - [x] 7 new tests covering required input, older versions with CVEs, current versions, reachability, sanitization, recommendations, empty routes - [x] All 307 existing MCP server tests pass (no regressions) _Claude Code on behalf of oscerd_ 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
