I have read somewhere that Outsystems uses HP fortify for SAST scans to capture any vulnerabilities. This scan is triggered whenever a build is created. Also I understand that they release security patches as and when new vulnerabilities are captured.
Can we publish the SAST results somewhere so that temporary fixes can be made to the application till security patches are released for the captured vulnerabilities. Just don't like not knowing and living with the vulnerabilities for the time between the build creation and security patches release if required.