Andrea Cosentino created CAMEL-24220:
----------------------------------------
Summary: Camel JBang MCP Server - Add camel_security_scan tool for
route security analysis
Key: CAMEL-24220
URL: https://issues.apache.org/jira/browse/CAMEL-24220
Project: Camel
Issue Type: Improvement
Components: camel-jbang
Reporter: Andrea Cosentino
Add a new MCP tool that scans a Camel route for security anti-patterns.
Distinct from the existing camel_route_harden_context (which focuses on CVE
advisories), this tool performs static analysis of route definitions.
Scope:
- New tool: camel_security_scan
- Detect: exposed secrets in route URIs, missing Camel* header filters on
consumers, insecure defaults (trustAllCertificates, allowJavaSerializedObject),
missing TLS configuration, ObjectInputStream usage without ObjectInputFilter
- Input: route file path or inline YAML/Java DSL
- Output: list of findings with severity, file/line location, and remediation
guidance
- Reference Camel security model (design/security.adoc) for rule definitions
Location: dsl/camel-jbang/camel-jbang-mcp/
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
