Hi everyone,
I'm wondering whether Vercel currently offers any built-in application security scanning.
Specifically, I'm interested in:
- SAST (Static Application Security Testing) to identify potential security issues in the application source code.
- Dependency vulnerability scanning (similar to GitHub Dependabot,
npm audit, orpnpm audit) to detect known CVEs in project dependencies.
I already use GitHub Dependabot, but I was curious whether Vercel has any native capabilities in this area or any integrations that surface these findings within the Vercel dashboard.
If this isn't currently supported, are there any plans to add these features in the future?
Thanks!