...

For Java (Maven/Gradle) projects, the DependencyCheck plugin can be a useful tool to discover advisories in dependencies.The Security team has also set up an experimental DependencyTrack instance at https://security-tools-ec2-va.apache.org/. If you make sure recent SBOMs are uploaded to this tool, you can use its interface to discover whether there are any current advisories for dependencies of your project. Email engelen@apache.org if you would like access.

If you publish a Software Bill Of Materials (SBOM) for your artifacts, there are various tools that can detect advisories in dependencies based on that. For more information about SBOMs see SBOM Software Bill of Materials

Publishing machine-readable analysis results

...