FAQ

Mark a Policy Violation Issue as Resolved

1min

If SOOS identifies policy violation(s) in your project, there are two courses of action you can take to resolve them:
Remove or replace the indicated package with one that is more acceptable. When the package has been removed and the violation is no longer detected during subsequent scans, the violation issue will be moved to the Resolved Issues﻿ workflow state.
If the package causing the violation is deemed safe and necessary, suppress the violation with a supporting message. This will move the violation to the Suppressed Issues﻿ workflow state.
﻿

Lock vs Non-Lock Manifests

My Vulnerability Doesn't Have a Fix Available