dependency-scanning - Identify vulnerabilities in third-party dependencies.
Scan package dependencies for known vulnerabilities using Snyk, Dependabot, and OWASP Dependency-Check.
Tags
Updated: 2026-09-22Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Scan dependencies using Snyk
- Configure Dependabot automated security updates
- Run OWASP Dependency-Check scans
- Audit Node.js package dependencies
- Audit Python package dependencies
- Audit Go project vulnerabilities
- Audit Ruby gem dependencies
- Generate Software Bill of Materials
Inputs
- Package manifest files
- CI/CD pipeline access
- Dependency scanning tools
- Container images
Outputs
- JSON scan reports
- SARIF scan results
- HTML scan reports
- CycloneDX SBOM files
- SPDX SBOM files
- Dependabot pull requests
Requirements
- Installed security scanning tools
- Authorized security assessment scope