For the complete documentation index, see llms.txt. This page is also available as Markdown.

Reference E: Issue category routing

Each issue category tab presents a distinct detection type. Use this table to route a CI scan result to the owning resolution guide.

Tab
Detection scope
First evidence to check
Resolution guide

Vulnerabilities

Known CVE vulnerabilities in dependencies resolved during the build. This includes transitive dependencies.

Whether a fix version exists. Confirm the dependency resolved during the build.

Investigate, prioritize, and remediate SCA CVE issues.

Configurations

IaC misconfigurations in Terraform, CloudFormation, Kubernetes, and Helm templates.

The resource block and attribute in the template.

Investigate, prioritize, and remediate IaC misconfiguration issues.

Secrets

Hardcoded credentials, API keys, and tokens.

The secret validation status. Rotate credentials that reach the build stage.

Investigate, prioritize, and remediate secrets issues.

Package Integrity

Package operational risk and license miscompliance.

The license obligation and package operational-risk rating.

Investigate package operational-risk and license-miscompliance issues.

Last updated

Was this helpful?