Vulnerability Scanning in CI/CD

Summary

Automatically scanning code dependencies (not just container images) for known vulnerabilities as part of the pipeline — catching an outdated, vulnerable library before it ships.

• 1Add a dependency vulnerability scan (e.g. via a free tool like Snyk or Dependabot) to a sample project.
• 2Learn the difference between scanning your own code and scanning third-party dependencies.
• 3Practice deciding when a found vulnerability should block a build versus just generate a warning.