Skip to main content
Version: 6.x (latest)

Module security

N|Solid backs up your CI/CD dependency scanning: it continuously downloads new vulnerability reports and checks the third-party packages loaded in your running processes against them, and it alerts you when a new report matches. Build-time scanning can't catch a vulnerability that's reported after your code has shipped; N|Solid can.

Detecting security vulnerabilities​

The Security Vulnerabilities view​

When vulnerabilities are found in your applications, the Security item in the navigation menu shows a warning icon. Click Security to open the Security Vulnerabilities view, which lists the vulnerabilities found in the processes matching the current global filter.

tip

See Filter Bar for more about filtering.

Nav Menu

Security Vulnerabilities View

Vulnerabilities are listed on the left. The numbered badge on each vulnerability shows how many processes it affects. Click a vulnerability to see its details, including its Affected Processes, the vulnerable versions, and a list of the affected applications with the number of affected processes in each.

Use the controls above the list to work with it:

  • Visible / Hidden tabs -- Switch between visible and hidden vulnerabilities. Each tab shows a count.
  • Eye icon -- Hide a vulnerability. Hidden vulnerabilities move to the Hidden tab and aren't counted in the number of vulnerabilities across your applications. Click the icon again to show it.
  • Sort by: -- Sort by Amount: High to Low, Amount: Low to High, A to Z, or Z to A.
  • View: -- Show 25, 50, 100, 125, or 150 vulnerabilities per page, and use the pager to move between pages.
  • AI icon (Generate AI report) -- Ask N|Solid Copilot for a report on the vulnerability. Requires the N|Solid MCP server (see Copilot prerequisites).
  • Help icon -- Open a short guide to the Security Vulnerabilities view.

Vulnerable processes in the Dashboard​

When the Dashboard shows a single process, open the Vulnerabilities tab to see the vulnerabilities found in that process (the badge shows the count), or the Modules tab to browse its packages with NCM data. See Single process view.

Dashboard Vuln view

Vulnerability information in the Scatterplot​

Select Vulnerabilities in the Scatterplot's SORT menu to highlight vulnerable processes with a bright red dot. Processes without known vulnerabilities are shown with a light-colored dot.

Scatterplot Vulns

Configuring notifications for security vulnerabilities​

To get notified about new vulnerabilities, click Notification Settings at the top of the Security Vulnerabilities view, or open Settings (gear icon, top right) and select Global Notifications.

Settings Menu

Scroll down to Vulnerability Notifications and add the notifications to send when a new vulnerability is found, such as a Slack or Microsoft Teams message, email, webhook, or PagerDuty integration. See Settings.

Global Vuln Config

NodeSource Support