Remediate dependency and application security findings

Acceptance

Observable completion

• Child Issues separately address dependency, secret, authorization, abuse, data-flow, and infrastructure findings; high-severity items are fixed or formally accepted.