4 ms·
What I would want from a dependencies management system is something that can also look at my infra. Instead of only scanning code dependencies in CI, I want to
by remram 2y ago
What I would want from a dependencies management system is something that can also look at my infra. Instead of only scanning code dependencies in CI, I want to be able to feed my my Ubuntu, nginx, ... version numbers and have it show how old they are, when they'll reach end of life, etc.
Alerting me of CVEs in my code dependencies is something everyone can do already.
And I don't mean something that only shows CVEs like InsightVM. Those are only useful for compliance. I mean something the team can actually use to plan their upgrades.