Gating Builds on Vulnerable Dependencies

By Techworth Labs

Add a dependency scan that fails a build on exploitable CVEs, then work through the upgrades, exceptions and expiry dates that keep the gate from being quietly switched off.

Browse
Skill Level: Beginner Duration: 45 min Supply Chain SecurityDevSecOps
Sign in to start

Free to browse. Takes about 45 minutes once you start.

What to Expect

  • Environment: describe the machine and what is installed on it.
  • Access: how the learner connects, and that credentials are per-session.
  • Progress: work is not saved once the lab ends.

What are hands-on labs?

A lab is a real environment, not a simulation. You get a live machine with the tooling already installed, a task taken from production work, and root access to take it apart. Nothing is mocked, nothing is multiple choice. It either works or it doesn't.

Real tooling

The same commands you would run at work, on a machine that is already set up for them. No screenshots, no sandboxed toy version.

Break it freely

Everything is disposable. When the clock runs out the environment is destroyed with everything in it, so there is no reason to be careful.

Useful on Monday

Built by engineers who run these systems in production. Skills you can apply to your own stack the same week, not exam preparation.

Browse labs