“Start having a look at your dependencies with open source tooling like the OWASP Dependency Checker”

Transcript evidence from Jeroen Willemsen -- Security automation with ci/cd.