vulnerability-resolver

Triage and resolve CVEs from Dependency-Check scan reports with suppression generation.

14|12|Updated Mar 30, 2020

Ready to run

npx skills add https://github.com/finos/morphir-dotnet --skill vulnerability-resolver

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vulnerability-resolver
Source: https://github.com/finos/morphir-dotnet/tree/main/.claude/skills/vulnerability-resolver
Command: npx skills add https://github.com/finos/morphir-dotnet --skill vulnerability-resolver

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill helps developers manage security vulnerabilities detected in dependencies by triaging CVEs and guiding remediation decisions.

Core Features & Use Cases

Trigger vulnerability scans: Initiate OWASP Dependency-Check workflows on branches to surface vulnerabilities.
Analyze Reports: Parse and categorize findings by severity to guide actions.
Resolution Guidance: Decide between fixes, suppressions, or deferrals with audit-ready documentation.
Suppression Management: Create and maintain documented suppressions for false positives.
Audit & Reporting: Generate resolution summaries for release gating and compliance.

Quick Start

Trigger a scan on the main branch using the CVE workflow, monitor progress, and review the resulting report to begin triage.

Frequently Asked Questions about vulnerability-resolver

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I triage CVEs detected in project dependencies?▼

To triage CVEs, trigger an OWASP Dependency-Check scan on your branch, parse the resulting report, and categorize findings by severity to guide remediation actions like fixes or suppressions.

What is the best way to manage vulnerability suppressions for false positives?▼

Managing vulnerability suppressions involves creating and maintaining documented suppression entries for false positives detected during CVE scans, ensuring audit-ready documentation for compliance.

How do I generate a resolution summary for release gating?▼

Generate a resolution summary by parsing vulnerability reports, deciding between fixes, suppressions, or deferrals, and producing structured audit documentation to satisfy release gating requirements.

Can I trigger OWASP Dependency-Check workflows on specific branches?▼

Yes, you can trigger OWASP Dependency-Check workflows on specific branches to surface vulnerabilities, monitor scan progress, and review the resulting reports to begin triage.

Why do I need to document suppressions for dependency vulnerabilities?▼

Documenting suppressions is necessary to maintain audit-ready records for false positives, ensuring that deferred vulnerabilities have clear resolution guidance and compliance evidence for release gating.

Does vulnerability triage work for both branch scans and release reports?▼

Vulnerability triage works across branches and releases by triggering scans, parsing reports to categorize findings by severity, and producing structured resolution summaries for release gating and compliance.