What should you use?

You are designing the security validation strategy for a project in Azure DevOps.

You need to identify package dependencies that have known security issues and can be resolved by an

update.

What should you use?
A . Octopus Deploy
B . Jenkins
C . Gradle
D . SonarQube

View Answer

Answer: D

Explanation:

With enterprise level of SonarQube you can use OWASP that runs the security scans for known vulnerabilities. https://www.sonarqube.org/features/security/

https://www.sonarqube.org/features/security/owasp/?gclid=Cj0KCQiAzZL-BRDnARIsAPCJs70Teq0-efI2Hd_h-kykCB7I_C7L88Q7kpiuTzuD6Xw1jUb6ZqIP7O0aApVzEALw_wcB