SCA والفرز

في هذا الدرس

run software composition analysis (SCA) and decide what to fix first.

الموضوعات المخطط لها

• SCA tools (OWASP Dependency-Check, Dependabot, Snyk, Trivy) match your dependencies against vulnerability databases.
• Triage by severity, exploitability (is there a known exploit), reachability (does your code call the vulnerable function), and exposure (internet-facing or not).
• Outcomes per finding: fix (upgrade), mitigate, or accept with a documented reason and an expiry date.
• Automate update pull requests so upgrades stay small.