Check catalog
158 checks. Every one explained.
Each check has a permanent ID, the attack it models, why it matters and how to fix it.
10 checks
- ERT-SUPPLY-001Dependencies with known CVEsCodeHigh
- ERT-SUPPLY-002Vulnerable framework version on the live appPassiveHigh
- ERT-SUPPLY-003Client-side library with known CVEsPassiveMedium
- ERT-SUPPLY-004Hallucinated or slopsquatted packageCodeHigh
- ERT-SUPPLY-005Known-malicious packageCodeCritical
- ERT-SUPPLY-006Install scripts in low-reputation dependencyCodeMedium
- ERT-SUPPLY-007Third-party scripts without integrityPassiveLow
- ERT-SUPPLY-008No lockfile committedCodeMedium
- ERT-SUPPLY-009No automated dependency updatesCodeLow
- ERT-SUPPLY-010Unsafe GitHub Actions workflowsCodeHigh
