Description
Dependabot told you a dependency is vulnerable. But can your app actually reach the vulnerable code? In this Security in 60 Seconds short, Carlin Cherry explains reachability analysis, which follows the call path to see whether your application can call the vulnerable code. Use it as one prioritization signal, alongside severity, EPSS, and production context.
Learn more about reachability analysis: https://gh.io/reachability
#Security #Dependabot #GitHub
Stay up-to-date on all things GitHub by connecting with us:
YouTube: https://gh.io/subgithub
Blog: https://github.blog
X: https://twitter.com/github
LinkedIn: https://linkedin.com/company/github
Insider newsletter: https://resources.github.com/newsletter/
Instagram: https://www.instagram.com/github
TikTok: https://www.tiktok.com/@github
About GitHub
It’s where over 180 million developers create, share, and ship the best code possible. It’s a place for anyone, from anywhere, to build anything—it’s where the world builds software. https://github.com