DevSecOps · hands-on lab
DevSecOps Lab 03: Dependency Scanning (SCA) with grype
Scan a project for vulnerable dependencies with grype, then remediate by upgrading until the vulnerability count drops.
- 40 minutesTime in the lab
- intermediateLevel
- 3 tasksChecked automatically
- CertificateVerifiable link when you finish
The situation
Scenario. The app pins old libraries. You scan the dependencies with grype (software composition analysis), see the known CVEs, then upgrade to safe versions and prove the risk dropped.
What you will do
- Scan the dependencies
- Remediate: upgrade and re-scan
- SCA vs SASTquestion
How it works
The lab opens in your browser: a real terminal or desktop, nothing to install. Work through the tasks, press Check after each one and the portal verifies your work. Stuck? Ask for a hint. Finish every task and you get a certificate page with its own verification link for LinkedIn or your CV.