A. ignoring security advisories B. using abandoned packages blindly C. tracking and fixing vulnerable libraries and packages D. never updating libraries
Correct Answer: C. tracking and fixing vulnerable libraries and packages
A. never updating libraries B. using abandoned packages blindly C. tracking and fixing vulnerable libraries and packages D. ignoring security advisories
Correct Answer: C. tracking and fixing vulnerable libraries and packages
A. ensuring build pipelines, artifacts and dependencies are protected and reproducible B. letting anyone modify releases C. building on infected machines D. skipping artifact signing
Correct Answer: A. ensuring build pipelines, artifacts and dependencies are protected and reproducible
A. skipping artifact signing B. letting anyone modify releases C. building on infected machines D. ensuring build pipelines, artifacts and dependencies are protected and reproducible
Correct Answer: D. ensuring build pipelines, artifacts and dependencies are protected and reproducible
A. building on infected machines B. letting anyone modify releases C. skipping artifact signing D. ensuring build pipelines, artifacts and dependencies are protected and reproducible
Correct Answer: D. ensuring build pipelines, artifacts and dependencies are protected and reproducible