Vulnerabilities
The Vulnerabiliies feature helps identify and categorize potential security issues within each build, allowing you to address vulnerabilities promptly.
Accessing Vulnerabilities
- Navigate to the Pipelines tab of your application.
-
Locate the Jobs section and click on it.
-
In the new menu that opens up, navigate to the 'Vulnerabilities' tab to access more comprehensive information about the security issues detected in a specific build.
-
Check the "Include image vulnerabilities" box to view security issues related to Docker images used in your application.
-
Interpreting Security Severity Information:
- A summary of security vulnerabilities categorized by severity (Critical, High, Medium, Low)
- A table listing specific vulnerabilities including their CVE IDs, affected packages, versions, and fixed versions
Note: Regularly reviewing Vulnerabilities information can help maintain the security of your Mendix applications and address potential issues in a timely manner.