Skip to content

Commit 88c58e4

Browse files
authored
Merge pull request #71 from woocommerce/qit-762-add-docs-around-what-audit-results-mean
Update docusaurus version and add missing docs
2 parents 9bc29ca + 93cf103 commit 88c58e4

File tree

3 files changed

+3258
-3160
lines changed

3 files changed

+3258
-3160
lines changed

docs/managed-tests/security.md

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -116,3 +116,28 @@ Use suppression judiciously. Strive to follow recommended practices rather than
116116

117117
- **Combine with other tests:**
118118
Security tests complement other managed tests, end-to-end tests, and code quality checks, ensuring a holistic view of your extension’s health.
119+
120+
## What do the audit results mean?
121+
122+
Audit results like:
123+
124+
- Known vulnerability check passed
125+
- Dependent packages vulnerability check passed
126+
127+
Means that the product has successfully passed automated security checks that scan for known risks in its code and any third-party tools it uses.
128+
129+
**What’s being checked?**
130+
131+
We use trusted auditing tools like `composer audit` and `npm audit` to:
132+
133+
- Check the product’s own code for any known security issues.
134+
- Scan third-party packages and libraries the product depends on — for example, payment gateways, form handlers, or UI components — and ensure none are listed in public vulnerability databases (such as [GitHub Security Advisories](https://github.com/advisories) or the [National Vulnerability Database](https://nvd.nist.gov/)).
135+
136+
**What does “check passed” mean?**
137+
138+
If a check is marked as passed, it means:
139+
- No known vulnerabilities were found in the product’s code or its dependencies at the time of testing.
140+
- All third-party packages used are either up-to-date or have no reported security issues.
141+
142+
These audits help ensure that the product is safe, stable, and trustworthy to install on your WooCommerce store.
143+

0 commit comments

Comments
 (0)