Unverified50% confidenceSolutionExact time
CI/CD 安全集成可部署 SAST 分析源代码漏洞、SCA 检查依赖组件已知漏洞、SBOM 生成组件清单用于审计
1
Sources
50%
Confidence
Long-term
Relevance
8/8/2026
First Seen
Sources
Related Claims
UnverifiedSCA (Software Composition Analysis) checks whether third-party dependencies have known vulnerabilities by cross-referencing vulnerability databases such as CVE/NVD.77% similarUnverifiedSecurity scanning tools such as Snyk, SonarQube, Mend (formerly WhiteSource), npm audit, and Trivy are typically integrated into CI/CD platforms such as Jenkins, GitLab CI, and GitHub Actions as mandatory gatekeeping checks before code merges.71% similarUnverifiedClaude Code's /security review command covers vulnerability checks for SQL injection, XSS, key leakage, and privilege escalation.69% similarUnverifiedLinux内核曾因编译器优化掉空指针检查而引入安全漏洞CVE-2009-189768% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/707502API
curl https://kongchang.com/api/v1/knowledge/claims/707502MCP
get_claim(id=707502)