Loading...

XML

Word

Printable

GitHub issues have a section that shows in which projects/scopes a dependency is used
- This helps to understand the impact the vulnerability has
Add documentation to README file
- How to add a new repo
Add version 7.14
- Heads-up: With this version, the Webapps live in their own repository
Decide which other repositories should be covered as well
- Spin, RPA bridge, etc.
Make an initial vulnerable dependency clearing and create security follow-up tickets

Create a GitHub Actions Workflow Matrix of all involved repositories to avoid redundancies between workflow files
- https://tomasvotruba.com/blog/2020/11/16/how-to-make-dynamic-matrix-in-github-actions/

is related to

CAM-14084 In vulnerability scanner, access token is obtain from github app

CAM-12398 Dependabot cannot resolve Maven dependencies in EE repository

CAM-14088 Qualify scanning results