{
  "id": "responsibility:dependency-security",
  "_kind": "Responsibility",
  "_file": "role/responsibilities/responsibilities-expanded-2.yaml",
  "_cluster": "role",
  "attributes": {
    "displayName": "Dependency security",
    "cadence": "continuous",
    "description": "Monitor and remediate vulnerabilities in third-party dependencies —\nautomated scanning (Dependabot, Snyk), upgrade prioritization, and\nvulnerability SLA tracking.\n"
  },
  "outgoingEdges": [
    {
      "from": "responsibility:dependency-security",
      "to": "role:appsec-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:dependency-security",
      "to": "role:security-engineer",
      "kind": "held_by",
      "attributes": {}
    },
    {
      "from": "responsibility:dependency-security",
      "to": "skill-area:dependency-vulnerability-mgmt",
      "kind": "requires_expertise",
      "attributes": {}
    },
    {
      "from": "responsibility:dependency-security",
      "to": "skill-area:supply-chain-security",
      "kind": "requires_expertise",
      "attributes": {}
    }
  ],
  "incomingEdges": [
    {
      "from": "role:appsec-engineer",
      "to": "responsibility:dependency-security",
      "kind": "holds_responsibility"
    },
    {
      "from": "role:DevSecOps-engineer",
      "to": "responsibility:dependency-security",
      "kind": "holds_responsibility"
    },
    {
      "from": "workflow:dependency-upgrade-cycle",
      "to": "responsibility:dependency-security",
      "kind": "triggers_responsibility",
      "attributes": {}
    },
    {
      "from": "workflow:cve-triage",
      "to": "responsibility:dependency-security",
      "kind": "triggers_responsibility",
      "attributes": {}
    }
  ]
}