Black Duck security check

199 阅读1分钟

1. Launch the black-duck dashbord.

  • Dev_code_snp-category: This is for non-prod scan
  • main: This is for the prod scan

image.png

2. Check the reference tree of the specific package

npm ls <package>

image.png

image.png

3. Select the top-level package, and check it in the snkyk.io

In this example, the gulp package cannot find a non-vulnerabilities package, so we need to fix it manually in the dashboard.

4. Fix it in dashboard manually.

image.png

image.png