-
Task
-
Resolution: Can't Do
-
Normal
-
None
-
None
-
False
-
-
False
-
-
*Issue:* An internal audit discovered that several application components rely on outdated third-party libraries, some of which have known security vulnerabilities.
*Corrective Action:* Integrate a dependency scanning tool like Snyk or Dependabot into the CI pipeline. A policy should be created to automatically generate tickets for any high or critical severity vulnerabilities found.
*Result:* This will improve the application's overall security posture by ensuring components are not exposed to previously discovered vulnerabilities.