“Then you need to make sure that this taps into your CI/CD process.”

Transcript evidence from David Habusha -- Third Party Software is not a Cathedral, It’s a Bazaar.