Incident Overview
You are on call for the Platform Engineering team. The nightly security scan for the payment-gateway service reported zero vulnerabilities.
However, the external vulnerability database published a critical CVE for a transitive dependency used by this service six hours ago. The pipeline logs show the build completed successfully in four minutes, significantly faster than the usual twelve-minute duration.
Investigation Options
Review the available operational moves and select the best immediate action.
A
Manually edit package-lock.json to remove the vulnerable library reference.
B
Invalidate the CI/CD build cache and trigger a fresh pipeline run.
C
Update the security scanning tool configuration to increase the timeout.
D
Restart the CI/CD runner agents to clear local memory.