We've covered quite a lot in this course.
Let's take a quick recap.
We started by talking about the risks present in a software supply chain and
how crucial it is to know exactly what components our software is using and
whether they have any known vulnerabilities.
We then saw how software composition analysis tools
can help give us that information.
And we took a high‑level look at how OWASP Dependency‑Check
works before seeing how to install it.
We then ran a series of demonstrations on Java,
JavaScript, and .NET applications, and along the way,
we learned all about how we can configure
Dependency‑Check to get the best possible results.
We talked about the best way to act on a Dependency‑Check report,
prioritizing, investigating, and patching,
and we saw how to suppress false positives.
Finally,
I shared some tips and best practices for adding
Dependency‑Check into your workflow.