Скачать или смотреть Vulnerability Risk Prioritization with EPSS, KEV, and CVSS metrics (GitLab 17.9)

In GitLab 17.9 we’ve added support for the following vulnerability risk data:

Exploit Prediction Scoring System (EPSS)
Known Exploited Vulnerabilities (KEV)
Common Vulnerabilities Scoring System (CVSS)

You can now efficiently prioritize risk across your dependency and container image vulnerabilities using this data. You can find the data in the Vulnerability Report and in the Vulnerability Details page.

OUTLINE
0:00 - Introduction
0:40 - Vulnerability Risk Data Explained
1:45 - Prerequisites
2:15 - Implementing Security Scanning
2:38 - Viewing the Vulnerability Report
3:21 - Triaging Vulnerabilities based off Risk
3:46 - Conclusion

USEFUL LINKS
Risk Assessment Data Documentation: https://docs.gitlab.com/ee/user/appli...
Feature Epic: https://gitlab.com/groups/gitlab-org/...
Release Blog Post: https://about.gitlab.com/releases/202...

Thanks for watching! Be sure to subscribe and follow @awkwardferny and @gitlab on X (formerly twitter) and LinkedIn for similar content.