Executive Summary

This report was generated by ShiftLeft from the Dependency Scan invocation on {{ scanTime }}. The scan used the ShiftLeft vulnerability database to audit the application dependencies for known vulnerabilities and exploits.

{% if metrics.total %}

Below is a summary of the issues identified:

{% for sev in ["critical", "high", "medium", "low", "total"] -%} {%- endfor %}
Severity Count
{{ sev|upper }} {{ metrics.get(sev)|default('NA') }}
{% endif %} {% if isError %}

 

  ShiftLeft recommends immediate remediation for the vulnerable dependencies before using this application in a live environment.

This would mostly involve updating the version numbers to a fixed version and performing the required functional and smoke tests. On rare occasions where a fix is not available, consider either delaying the deployment or identifying a suitable well-supported alternative package.

{% else %}

 

  Based on this report, the application is certified as ready for deployment to test and production environments. Please refer to the SAST and container scan reports (if available) for additional context.

{% endif %}