thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Application & OT Security · Intermediate

Dependency Pinning

Specifying exact versions (and ideally cryptographic hashes) of dependencies so builds use known, reviewed components.

Definition

Pinning prevents unexpected upgrades to compromised or broken versions and supports reproducible builds. It must be combined with automated update tools so pinned versions do not become outdated and vulnerable.

Example

Installing Python packages with --require-hashes from a fully hashed requirements file.

Exam tip

Pin and also update regularly; pinning without updates creates security debt.

Related terms