Vulnerability scanning
Finding known vulnerabilities in the open-source packages a CAP project installs, before the application is deployed. npm audit reports them for a Node.jsNode.jsA cross-platform JavaScript runtime that servers, command line tools and scripts written in JavaScript are run with. For the things here, the prerequisite a repository names when its build is a set of npm scripts. project's dependency tree.
Overview
No core answer is documented.
Not covered: capire's security overview puts patch and vulnerability management on the application provider. The check before deployment is npm's own npm audit, which reads the project's dependencies against the registry's advisories; on BTP, deployed applications are the Application Vulnerability ReportApplication Vulnerability ReportA BTP service that tracks vulnerabilities in the open-source components of applications deployed in a BTP landscape, with an OData API for taking the report into ticketing systems.sap official, btp's.
Artifacts
Details
Coverage
For your agent
- Ref
capability:vulnerability-scanning- JSON
- /capabilities/vulnerability-scanning.json
- MCP
- Connecting an agent