Has SOOS been impacted by Log4j?

How long does an SCA scan take?

How often is SOOS updating open source vulnerability data?

Details on how often SOOS is providing new vulnerability data.

How to attest an issue in your list

Choosing to address issues at a later time

Mark a vulnerability as resolved

How can I remove the issue alert from my dashboard?

Reporting vulnerabilities that SOOS did not identify

Stop your build if there are vulnerabilities or violations

Halt your project's build as soon as a vulnerability or violation is identified.

What does "disputed" mean in the vulnerability details?

SOOS identified a vulnerability that is tagged as **DISPUTED**.

Where can we find our attested vulnerabilities?

We attested a number of vulnerabilities, where do we access them to re-assess?