Skip to content
This repository is currently being migrated. It's locked while the migration is in progress.

Resolve next-build alerts in GHEC-US #24283

@klwatanabe

Description

@klwatanabe

Problem Statement

When we migrate repos into GHEC-US, the repos will be subject to security scans and these alerts will go to VA Cybersecurity Operations Center Cybersecurity Incident Response (CSOC CIR).

With #24048, we resolved many of these alerts before the migration. We want to continue to address the remaining alerts in GHEC.

Why is this work important? How does it serve Veterans or people who serve them?

This work helps CSOC CIR ensure that our code is safe to use, which helps them protect Veteran data and protect VA services.

Acceptance Criteria:

  • Resolve code scanning alerts on next-build
  • Resolve Dependabot alerts at critical and high severity on next-build

Metadata

Metadata

Assignees

Labels

CMS TeamCMS Product team that manages both editor exp and devops

Type

No fields configured for Task.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions