← Policy gallery

ssdf_rv_vulnerability_remediated

secure-development security pure_temporal secure-developmentnistssdfsupply-chainrvrag-red

Each identified vulnerability is assessed and remediated or mitigated (RV.2).

Formula

G(Finding → assessed ∧ (remediated ∨ mitigated))

Why it matters

SSDF RV.2: assess, prioritize, and remediate vulnerabilities; develop and implement remediation or mitigation.

Examples

passes the practice's evidence is present

fails the required secure-development step is absent

Use it

ponens policies add ssdf_rv_vulnerability_remediated --into ./trace.json
ponens trace check ./trace.json