Vulnerable dependencies: npm audit, pip-audit, overrides and Dependabot

55 min Node.js 22 (Debian, git, npm, python3)

Objective

Learn to find the vulnerable libraries of a project (Node.js and Python), read a security advisory to decide which version to install, also fix transitive dependencies, make installations reproducible, and hand the monitoring over to a bot that opens update pull requests.

This lesson is part of the full course

Unlock DevSecOps: Securing Code, Dependencies and Containers to read every lesson, do the exercises, access the simulations and earn your certificate.

Buy — 290 MAD All-access pass — 1,490 MAD

Already enrolled? Log in.