AS AN Application Developer
I WANT to ensure that code dependencies are up to data and secure
SO THAT I have confidence security exploits are quickly patched as they are discovered.
Acceptance Criteria
[x] Implement dependency scanning for .NET based repositories
[x] 'Break' the build when critical and severe security issues are found in dependencies.
[x] Passively scan repositories which may not be under active development for dependency issues and notify stakeholders.
AS AN Application Developer I WANT to ensure that code dependencies are up to data and secure SO THAT I have confidence security exploits are quickly patched as they are discovered.
Acceptance Criteria