Does Q2 use a code scanner or dependency scanner?

Question

Curious if Q2 uses a code scanner at all or a dependency scanner for vulnerabilities with the code pushed to gitlab

Trey Teter · Answer

Hello Draden There are a few checks that happen There is an SDK level check through q2 check and then during the dockerize step and the scan step there are dependency vulnerability checks Also while the code is running there is a scan that happens periodically on those running services that looks for vulnerabilities in the docker containers Trey

Answers