Skip to content

Commit 399a9a7

Browse files
authored
Update verification_workflow.md
1 parent e93bcfe commit 399a9a7

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

details/verification_workflow.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ In the evolving landscape of application development, reliance on third-party an
1414

1515
To create a secure and trusted source of Java libraries for your application, we have instituted a rigorous vetting process. This multi-tiered approach combines static code analyzers with human and AI-based code reviews. Upon successful security validation, libraries are incorporated into our secure repository. Each library is then packaged with a Software Bill of Materials (SBOM) and signed JAR files for additional assurance.
1616

17-
**Note**: We don't modify the original code during the library verification process. Any found vulnerabilities are remediated during the following [Library Vulnerability Remediation Workflow](details/vulnerability_remediation_workflow.md)
17+
**Note**: We don't modify the original code during the library verification process. Any found vulnerabilities are remediated during the following [Library Vulnerability Remediation Workflow](/details/vulnerability_remediation_workflow.md)
1818

1919

2020
The accompanying graph outlines the steps involved in our vetting process, providing a visual guide to how we ensure the safety and reliability of each library in our Trusted Artifactory.

0 commit comments

Comments
 (0)