skills.rest
finos
finosOFFICIAL
Explore all skills by this author →
WebsiteGitHub

vulnerability-resolver

Triage and resolve CVEs from Dependency-Check scan reports with suppression generation.

14|12|Updated Mar 30, 2020
One-click install
npx skills add https://github.com/finos/morphir-dotnet --skill vulnerability-resolver
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vulnerability-resolver
Source: https://github.com/finos/morphir-dotnet/tree/main/.claude/skills/vulnerability-resolver
Command: npx skills add https://github.com/finos/morphir-dotnet --skill vulnerability-resolver

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps developers manage security vulnerabilities detected in dependencies by triaging CVEs and guiding remediation decisions.

Core Features & Use Cases

  • Trigger vulnerability scans: Initiate OWASP Dependency-Check workflows on branches to surface vulnerabilities.
  • Analyze Reports: Parse and categorize findings by severity to guide actions.
  • Resolution Guidance: Decide between fixes, suppressions, or deferrals with audit-ready documentation.
  • Suppression Management: Create and maintain documented suppressions for false positives.
  • Audit & Reporting: Generate resolution summaries for release gating and compliance.

Quick Start

Trigger a scan on the main branch using the CVE workflow, monitor progress, and review the resulting report to begin triage.

Frequently Asked Questions about vulnerability-resolver

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I triage CVEs detected in project dependencies?▼

To triage CVEs, trigger an OWASP Dependency-Check scan on your branch, parse the resulting report, and categorize findings by severity to guide remediation actions like fixes or suppressions.

What is the best way to manage vulnerability suppressions for false positives?▼

Managing vulnerability suppressions involves creating and maintaining documented suppression entries for false positives detected during CVE scans, ensuring audit-ready documentation for compliance.

How do I generate a resolution summary for release gating?▼

Generate a resolution summary by parsing vulnerability reports, deciding between fixes, suppressions, or deferrals, and producing structured audit documentation to satisfy release gating requirements.

Can I trigger OWASP Dependency-Check workflows on specific branches?▼

Yes, you can trigger OWASP Dependency-Check workflows on specific branches to surface vulnerabilities, monitor scan progress, and review the resulting reports to begin triage.

Why do I need to document suppressions for dependency vulnerabilities?▼

Documenting suppressions is necessary to maintain audit-ready records for false positives, ensuring that deferred vulnerabilities have clear resolution guidance and compliance evidence for release gating.

Does vulnerability triage work for both branch scans and release reports?▼

Vulnerability triage works across branches and releases by triggering scans, parsing reports to categorize findings by severity, and producing structured resolution summaries for release gating and compliance.

Related Skills

gelowzzzgelowzzz

security-scanner

Scan code, configurations, and dependencies for OWASP Top 10:2025 vulnerabilities.

Community
Advanced
scouzi1966scouzi1966
324

afm-build-promote-nightly

Build AFM stable releases from main HEAD or nightly commits with validated patches and packaging.

Community
Advanced
nikhillinitnikhillinit

code-reviewer

Automate code review for Python, JavaScript, and TypeScript pull requests.

Community
Advanced
Logos-LiberLogos-Liber
17

vulnerability-scanning

Identifies security vulnerabilities in code, dependencies, and container images.

Official
Advanced