5 Core tasks for finding and fixing vulnerabilities

Now that we’ve prepared to find and fix vulnerabilities, we can begin the main task.

The core tasks are: identify findings (including handling findings reported by others), deduplicate them, validate them, triage them, fix the vulnerabilities, verify the fixes, report vulnerabilities in others’ components, and release and deploy the fixes. In practice these overlap and loop; for example, you’ll deduplicate again after validation, and you’ll repeat the whole process.