New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Synk Open Source の導入 #5198

Open

nanasess opened this issue Oct 20, 2021 · 0 comments

Labels

Milestone

Contributor

nanasess commented Oct 20, 2021

概要(Overview)

https://snyk.io/product/open-source-security-management/
現在、依存パッケージに脆弱性が見つかると dependabot が通知してくれるが、もうちょっと深く分析できる

期待する内容(Expect) or 要望 (Requirement)

Synk Open Source を CI/CD に組み込む

環境 (environment)

EC-CUBE: 4.1

関連情報 (Ref)

JSライブラリはすべて npm で管理したい #5185

chihiro-adachi added the improvement label

chihiro-adachi added this to the 4.1.x milestone

xuelian311 modified the milestones: 4.1.x, 4.x

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment