gary.d (Community Member) asked a question.

How do I deal with dual-licensed third party components so the scan is cleaner? I put in mitigations stating we are using the MIT/other open license, but that still leaves the finding in the list. Why wouldn't the scan assume we would use best option?

  • marcboggs (Community Member)

    Why would it assume you are using the best option? In security, you have to error out of caution.

Topics (1)

No articles found
Loading

Ask the Community

Get answers, share a use case, discuss your favorite features, or get input from the community.